nerdexam
CompTIA

SY0-501 · Question #279

A security administrator has been asked to implement a VPN that will support remote access over IPSEC. Which of the following is an encryption algorithm that would meet this requirement?

The correct answer is B. AES. IPSec VPNs require an encryption algorithm to secure data in transit, and AES (Advanced Encryption Standard) is a widely supported symmetric encryption algorithm used within IPSec for confidentiality.

Submitted by satoshi_tk· Mar 4, 2026General security concepts

Question

A security administrator has been asked to implement a VPN that will support remote access over IPSEC. Which of the following is an encryption algorithm that would meet this requirement?

Options

  • AMD5
  • BAES
  • CUDP
  • DPKI

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    74% (20)
  • C
    15% (4)
  • D
    7% (2)

Why each option

IPSec VPNs require an encryption algorithm to secure data in transit, and AES (Advanced Encryption Standard) is a widely supported symmetric encryption algorithm used within IPSec for confidentiality.

AMD5

MD5 is a hashing algorithm used for integrity verification (authentication), not an encryption algorithm, so it cannot encrypt VPN traffic.

BAESCorrect

AES (Advanced Encryption Standard) is a symmetric block cipher and a valid encryption algorithm supported by IPSec for encrypting VPN tunnel traffic. It is used within IPSec's ESP (Encapsulating Security Payload) protocol to provide confidentiality, and is available in key sizes of 128, 192, and 256 bits, making it a strong and compliant choice for secure remote access VPNs.

CUDP

UDP is a Layer 4 transport protocol used for transmitting data packets across networks, not an encryption algorithm; it has no encryption capability.

DPKI

PKI (Public Key Infrastructure) is a framework for managing digital certificates and public-key encryption, not itself an encryption algorithm that can be directly applied to IPSec tunnel encryption.

Concept tested: IPSec VPN encryption algorithm selection

Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/vpn-deploy-server-infrastructure

Topics

#AES#IPSec#VPN#symmetric encryption

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice