Examkin

Soru

Zorluk: OrtaVirtual Private Networks and Remote Access Security

Match each Virtual Private Network (VPN) or remote access technology on the left with its core security or operational characteristic on the right.

  • Clientless SSL/TLS VPNProvides secure remote access via standard web browsers using TCP 443 without requiring endpoint software installation.
  • IPsec Encapsulating Security Payload (ESP)Provides encryption, data integrity, and authentication for packet payloads using IP protocol 50.
  • IPsec Authentication Header (AH)Provides authentication and integrity for the entire IP packet using IP protocol 51, but fails when traversing NAT devices.
  • Generic Routing Encapsulation (GRE)Encapsulates multicast and non-IP traffic between routers across an IP network but lacks native encryption.

Cevap

Clientless SSL/TLS VPN matches browser-based access using TCP 443 without client software; IPsec ESP matches payload encryption and integrity via IP protocol 50; IPsec AH matches complete IP packet integrity via IP protocol 51 incompatible with NAT; GRE matches unencrypted encapsulation of multicast and routing traffic.
Each VPN and remote access technology aligns directly with its primary operating mode: Clientless SSL/TLS VPN enables client-free web access on TCP 443; IPsec ESP encrypts payloads using IP protocol 50; IPsec AH authenticates entire IP headers via IP protocol 51 (which breaks under NAT modification); and GRE provides unencrypted multiprotocol tunneling.

Adım Adım Çözüm

1
Analyze client-side software requirements for remote access portals.
Clientless SSL/TLS VPN establishes remote access within standard web browser sessions over TCP 443, eliminating endpoint software deployment.
Web portals leverage built-in browser cryptography for lightweight remote connectivity.
2
Differentiate between IPsec ESP and AH header capabilities and NAT interactions.
ESP provides payload encryption using IP protocol 50, while AH authenticates outer IP headers using IP protocol 51, causing ICV failures when NAT alters packet headers.
AH includes mutable IP header fields in its hash verification, making it incompatible with address translation unless Nat-Traversal encapsulates it differently.
3
Evaluate multiprotocol routing encapsulation protocols.
GRE encapsulates non-IP and multicast traffic like OSPF/EIGRP updates across IP networks, but provides zero native encryption.
GRE delivers protocol versatility for site-to-site transport, relying on IPsec when confidentiality is required.

Anahtar Kavram

Virtual Private Networks and Remote Access Security protocols, IPsec modes, and tunneling mechanisms.
Bu soruyu puanla

Konular

Virtual Private Networks and Remote Access Security

Bu konudan daha fazla soru