SY0-501 · Question #279
A security administrator has been asked to implement a VPN that will support remote access over IPSEC. Which of the following is an encryption algorithm that would meet this requirement?
The correct answer is B. AES. IPSec VPNs require an encryption algorithm to secure data in transit, and AES (Advanced Encryption Standard) is a widely supported symmetric encryption algorithm used within IPSec for confidentiality.
Question
A security administrator has been asked to implement a VPN that will support remote access over IPSEC. Which of the following is an encryption algorithm that would meet this requirement?
Options
- AMD5
- BAES
- CUDP
- DPKI
How the community answered
(27 responses)- A4% (1)
- B74% (20)
- C15% (4)
- D7% (2)
Why each option
IPSec VPNs require an encryption algorithm to secure data in transit, and AES (Advanced Encryption Standard) is a widely supported symmetric encryption algorithm used within IPSec for confidentiality.
MD5 is a hashing algorithm used for integrity verification (authentication), not an encryption algorithm, so it cannot encrypt VPN traffic.
AES (Advanced Encryption Standard) is a symmetric block cipher and a valid encryption algorithm supported by IPSec for encrypting VPN tunnel traffic. It is used within IPSec's ESP (Encapsulating Security Payload) protocol to provide confidentiality, and is available in key sizes of 128, 192, and 256 bits, making it a strong and compliant choice for secure remote access VPNs.
UDP is a Layer 4 transport protocol used for transmitting data packets across networks, not an encryption algorithm; it has no encryption capability.
PKI (Public Key Infrastructure) is a framework for managing digital certificates and public-key encryption, not itself an encryption algorithm that can be directly applied to IPSec tunnel encryption.
Concept tested: IPSec VPN encryption algorithm selection
Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/vpn-deploy-server-infrastructure
Topics
Community Discussion
No community discussion yet for this question.