200-301 Question 431
Select 2A company has multiple branch offices that need to securely connect to the headquarters and allow employees to work remotely using secure connections. Which of the following VPN solutions would be most appropriate for achieving both objectives?
- A
IPsec site-to-site VPN for branch office connections
- B
IPsec remote access VPN for individual employees
- C
GRE tunnel without encryption for branch office connections
- D
SSL VPN for individual employees
- E
MPLS for secure connections to the branch offices
Show answer and explanation
Correct answers: A, B
Explanation
To address the company's needs, IPsec site-to-site VPN is the best solution for securely connecting branch offices to the headquarters. For individual employees working remotely, IPsec remote access VPN ensures secure and encrypted connections. Together, these solutions meet the company's objectives for secure communication across both branch offices and remote users.
- A. Correct.
IPsec site-to-site VPN is ideal for securely connecting branch offices to the headquarters by encrypting traffic between the two sites.
- B. Correct.
IPsec remote access VPN provides secure, encrypted connections for individual employees working remotely, ensuring data confidentiality and integrity.
- C. Incorrect.
GRE tunnels do not provide encryption by default and are therefore not suitable for secure connections without additional security measures.
- D. Incorrect.
While SSL VPN can be used for remote access, it is not specified as the organization’s requirement in the scenario. IPsec remote access VPN is more appropriate in this case.
- E. Incorrect.
MPLS provides a private network solution but does not inherently offer end-to-end encryption, making it less secure for the scenario described.