ANS-C01 Question 501
Single answerYour company has deployed a hybrid cloud architecture with an AWS VPC connected to an on-premises data center using a VPN connection. The company requires all data in transit over this VPN to be encrypted using industry-standard protocols. Which encryption method should you implement to meet this requirement?
- A
IPsec with AES-256 encryption
- B
SSL/TLS with a self-signed certificate
- C
Plaintext transmission with application-layer encryption
- D
L2TP without encryption
Show answer and explanation
Correct answer: A
Explanation
IPsec with AES-256 encryption is the correct choice for securing data in transit over a VPN connection between an AWS VPC and an on-premises data center. IPsec is a protocol suite that provides secure communication by encrypting and authenticating data. AES-256 offers strong encryption, ensuring data confidentiality during transit. The other options either lack encryption or are not suitable for the VPN use case described.
- A. Correct.
IPsec with AES-256 encryption is a widely accepted, industry-standard protocol for securing data in transit over VPNs. It provides robust encryption and authentication mechanisms.
- B. Incorrect.
SSL/TLS is commonly used for securing web traffic but is not typically used for encrypting data in transit over VPN connections. Additionally, a self-signed certificate may not meet security compliance requirements.
- C. Incorrect.
Plaintext transmission does not secure data in transit, and relying solely on application-layer encryption does not fulfill the requirement for VPN-level encryption.
- D. Incorrect.
L2TP without encryption does not provide any encryption for data in transit, making it unsuitable for securing VPN connections.