Question

Difficulty: EasyVirtual Private Networks and Remote Access Security

Match each remote access protocol or security component with its primary technical characteristic.

  • IPsec ESP (Encapsulating Security Payload)Provides confidentiality, authentication, and integrity by encrypting the IP packet payload.
  • Clientless SSL/TLS VPNEnables secure access to internal web applications via standard web browsers using TCP port 443.
  • GRE (Generic Routing Encapsulation)Encapsulates various network-layer protocols into virtual point-to-point tunnels without providing inherent encryption.
  • RADIUSProvides central AAA management for remote user authentication using UDP ports 1812 and 1813.

Answer

IPsec ESP matches with encrypting packet payload data for confidentiality; Clientless SSL/TLS VPN matches with browser access over TCP port 443; GRE matches with unencrypted multi-protocol tunnel encapsulation; and RADIUS matches with central AAA management over UDP ports 1812/1813.
Each item correctly matches its defining operational feature: IPsec ESP encrypts payload data; Clientless SSL/TLS VPN provides web access via TCP port 443 without client software; GRE provides unencrypted tunneling; and RADIUS manages central AAA authentication using UDP ports 1812 and 1813.

Step-by-Step Solution

1
Analyze the primary function of IPsec ESP.
IPsec ESP provides payload confidentiality and integrity through encryption.
ESP is the main protocol in the IPsec suite dedicated to data encryption.
2
Analyze the requirements for Clientless SSL/TLS VPN.
It operates directly inside standard web browsers via HTTPS (TCP port 443) without endpoint client software.
Clientless SSL/TLS leverages native browser TLS support for web application access.
3
Examine the capabilities of GRE.
GRE establishes point-to-point IP tunnels for diverse protocols but provides no encryption.
GRE is designed strictly for protocol encapsulation, not data security.
4
Identify the operational role of RADIUS.
RADIUS centralizes authentication, authorization, and accounting over UDP ports 1812 and 1813.
RADIUS is a standard AAA protocol used in network access authentication.

Key Concept

Remote access protocols and security mechanisms
Rate this question