Examkin

Question

Difficulty: EasyRemote Access and Site-to-Site VPN Concepts

Match each VPN technology or deployment concept to its corresponding operational characteristic.

  • Site-to-Site IPsec VPNConnects fixed branch office networks to corporate headquarters using gateway appliances without requiring software on host endpoints.
  • Remote Access SSL VPNAllows mobile or work-from-home users to establish secure encrypted connections to the internal corporate network.
  • Split TunnelingDirects corporate-bound traffic through the VPN tunnel while allowing standard internet traffic to bypass the tunnel.
  • IPsec Encapsulating Security Payload (ESP)Provides data confidentiality through encryption along with integrity and authentication for IP packet payloads.

Answer

Site-to-Site IPsec VPN matches fixed network gateway interconnection; Remote Access SSL VPN matches individual remote user connections; Split Tunneling matches selective corporate destination routing; IPsec ESP matches payload confidentiality and integrity.
Each concept correctly aligns with its core CCNA VPN definition: Site-to-Site links gateways, Remote Access links individual endpoints, Split Tunneling routes selectively to conserve bandwidth, and ESP encrypts payload data.

Step-by-Step Solution

1
Identify the deployment topology of Site-to-Site IPsec VPNs.
Match Site-to-Site VPNs to the description of connecting fixed location gateways without host software.
Site-to-Site VPNs join static remote subnets seamlessly across an untrusted network.
2
Identify the primary use case of Remote Access SSL VPNs.
Match Remote Access VPNs to secure client connections for mobile and remote workers.
Remote access VPN solutions cater to individual user endpoints dynamically establishing secure sessions.
3
Analyze the operational traffic behavior of Split Tunneling.
Match Split Tunneling to routing corporate traffic into the tunnel while internet traffic bypasses it.
Split tunneling isolates targeted internal subnets for tunnel routing while preserving local internet connectivity.
4
Identify the core security service offered by IPsec ESP.
Match IPsec ESP to data confidentiality via payload encryption.
ESP encapsulates and encrypts payload data to maintain privacy across IP networks.

Key Concept

Remote Access and Site-to-Site VPN Concepts
Rate this question

Topics

Remote Access and Site-to-Site VPN Concepts

More questions from this topic