Examkin

Question

Difficulty: MediumRemote Access and Site-to-Site VPN Concepts

Match each VPN deployment characteristic or operational mode on the left with its corresponding VPN technology concept on the right.

  • Always-on encrypted tunnel established between two static network gateways to interconnect distinct local area networks transparently.Site-to-Site VPN
  • User-initiated session that connects an individual mobile endpoint to the enterprise internal network over an untrusted network.Remote Access VPN
  • IPsec mode that encrypts the entire original IP packet and prepends a new outer IP header for gateway-to-gateway delivery.IPsec Tunnel Mode
  • IPsec mode that encrypts only the IP payload and leaves the original IP header intact, typically used for host-to-host communications.IPsec Transport Mode

Answer

The correct pairings match Site-to-Site VPN to the persistent gateway-to-gateway network link, Remote Access VPN to the user-initiated endpoint connection, IPsec Tunnel Mode to whole-packet encapsulation with a new IP header, and IPsec Transport Mode to payload-only encryption preserving the original header.
The correct pairings accurately reflect the core differences between site-to-site network connectivity and remote endpoint access, as well as the structural differences between IPsec Tunnel mode (new outer header) and Transport mode (payload encryption only).

Step-by-Step Solution

1
Differentiate between VPN deployment topologies.
Identify that connecting static branch networks via perimeter devices describes a Site-to-Site VPN, while connecting individual mobile devices describes a Remote Access VPN.
Topologies differ fundamentally by whether connections are established permanently between network infrastructure nodes or dynamically by remote client devices.
2
Analyze IPsec operation modes.
Identify that adding a new outer IP header to protect the entire packet is IPsec Tunnel Mode, whereas retaining the original outer header while encrypting only the payload is IPsec Transport Mode.
Tunnel Mode protects end-to-end internal addressing across public networks between security gateways, while Transport Mode protects communications between hosts whose addresses are already routable.

Key Concept

Remote Access vs Site-to-Site VPN architecture and IPsec encapsulation modes (Tunnel vs Transport).
Rate this question

Topics

Remote Access and Site-to-Site VPN Concepts

More questions from this topic