ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 40 - N10-009 discussion

Report
Export

A network engineer is designing a secure communication link between two sites. The entire data stream needs to remain confidential. Which of the following will achieve this goal?

A.
GRE
Answers
A.
GRE
B.
IKE
Answers
B.
IKE
C.
ESP
Answers
C.
ESP
D.
AH
Answers
D.
AH
Suggested answer: C

Explanation:

Definition of ESP (Encapsulating Security Payload):

ESP is a part of the IPsec protocol suite designed to provide confidentiality, integrity, and authenticity of data by encrypting the payload and optional ESP trailer.

Ensuring Confidentiality:

Encryption: ESP encrypts the payload, ensuring that the data remains confidential during transmission. Only authorized parties with the correct decryption keys can access the data.

Modes of Operation: ESP can operate in transport mode (encrypts only the payload) or tunnel mode (encrypts the entire IP packet), both providing strong encryption to secure data between sites.

Comparison with Other Protocols:

GRE (Generic Routing Encapsulation): A tunneling protocol that does not provide encryption or security features.

IKE (Internet Key Exchange): A protocol used to set up a secure, authenticated communications channel, but it does not encrypt the data itself.

AH (Authentication Header): Provides integrity and authentication for IP packets but does not encrypt the payload.

Implementation:

Use ESP as part of an IPsec VPN configuration to encrypt and secure communication between two sites. This involves setting up IPsec policies and ensuring both endpoints are configured to use ESP for data encryption.

CompTIA Network+ study materials on IPsec and secure communication protocols.

asked 02/10/2024
Tebello Mofokeng
29 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first