Examkin

Question

Difficulty: EasyVirtual Private Networks and Remote Access Security

Match each Virtual Private Network (VPN) protocol to its primary operational characteristic or protocol specification.

  • IPsecOperates at Layer 3 (Network layer) utilizing ESP and IKE for securing host-to-host or site-to-site tunnels
  • SSL/TLS VPNProvides clientless remote access to internal network resources using standard web browsers over TCP port 443
  • PPTPLegacy Layer 2 protocol that relies on TCP port 1723 and GRE, now considered insecure and deprecated
  • WireGuardModern, lightweight VPN protocol running in kernel space utilizing modern cryptographic primitives like ChaCha20

Answer

IPsec matches with Layer 3 operation using ESP and IKE; SSL/TLS matches with clientless browser remote access over TCP port 443; PPTP matches with legacy Layer 2 protocol using TCP port 1723; WireGuard matches with lightweight kernel-space protocol using ChaCha20.
Each protocol is matched accurately based on its layer operation, port usage, and cryptographic implementation: IPsec provides Layer 3 tunneling with ESP/IKE; SSL/TLS allows clientless access on TCP port 443; PPTP is a legacy Layer 2 protocol operating over TCP port 1723 and GRE; and WireGuard is a modern kernel-level protocol using ChaCha20 encryption.

Step-by-Step Solution

1
Identify the OSI layer and encapsulation mechanism of IPsec.
IPsec operates at Layer 3 (Network layer) using ESP and IKE.
IPsec secures IP packets directly at the network layer for site-to-site or client-based tunnels.
2
Determine the connection and client requirements for SSL/TLS VPNs.
SSL/TLS VPNs use standard HTTPS (TCP port 443) for clientless access.
Web browsers natively support SSL/TLS, eliminating the need for dedicated VPN client software.
3
Recall the protocol components and security status of PPTP.
PPTP relies on TCP port 1723 and GRE, and is deprecated due to security flaws.
PPTP uses vulnerable encryption and authentication methods.
4
Identify the key features of WireGuard.
WireGuard is a modern kernel-space protocol using ChaCha20.
WireGuard was designed for simplicity, high speed, and modern cryptographic standards.

Key Concept

Virtual Private Network (VPN) Protocols and Characteristics
Rate this question

Topics

Virtual Private Networks and Remote Access Security

More questions from this topic