nerdexam
CompTIA

XK0-004 · Question #271

A Linux user uses a VPN to securely access the company's systems from a laptop. Which of the following protocols are MOST likely used to secure the VPN connection? (Choose two.)

The correct answer is A. IPSec E. SSL/TLS. IPSec and SSL/TLS are the two industry-standard protocol suites used to encrypt and authenticate VPN tunnels, with IPSec operating at Layer 3 and SSL/TLS operating at the transport layer.

Security

Question

A Linux user uses a VPN to securely access the company's systems from a laptop. Which of the following protocols are MOST likely used to secure the VPN connection? (Choose two.)

Options

  • AIPSec
  • BHTTP
  • CSFTP
  • DVNC
  • ESSL/TLS
  • FSELinux

How the community answered

(23 responses)
  • A
    91% (21)
  • B
    4% (1)
  • F
    4% (1)

Why each option

IPSec and SSL/TLS are the two industry-standard protocol suites used to encrypt and authenticate VPN tunnels, with IPSec operating at Layer 3 and SSL/TLS operating at the transport layer.

AIPSecCorrect

IPSec (Internet Protocol Security) is a Layer-3 protocol suite that provides authentication (AH) and encryption (ESP) for IP packets, and is the foundation of IKEv2-based VPNs and site-to-site tunnels.

BHTTP

HTTP is an unencrypted application-layer protocol and provides no confidentiality or authentication suitable for a VPN.

CSFTP

SFTP (SSH File Transfer Protocol) is used for secure file transfers, not for establishing VPN tunnels.

DVNC

VNC (Virtual Network Computing) is a remote desktop sharing protocol and does not create VPN tunnels or provide network-level encryption.

ESSL/TLSCorrect

SSL/TLS secures VPN connections at the transport layer and is the basis for SSL VPN products such as OpenVPN and Cisco AnyConnect, enabling encrypted tunnels over standard HTTPS ports.

FSELinux

SELinux is a Linux kernel mandatory access control security framework, not a network protocol; it cannot secure a VPN connection.

Concept tested: VPN encryption protocols IPSec and SSL/TLS

Source: https://www.rfc-editor.org/rfc/rfc4301

Topics

#VPN#IPSec#SSL/TLS#network security protocols

Community Discussion

No community discussion yet for this question.

Full XK0-004 Practice