200-301 exam dumps

200-301 practice question 55 of 506

Cisco Certified Network Associate. Free level, Cisco. Free question with the correct answer and a full explanation.

200-301 Question 55

Select 2

Your company has a branch office that needs to securely connect to the main office over the public internet. The IT team decides to implement a WAN solution using IPsec tunnels. Which two protocols or technologies are most commonly used in this scenario to establish secure connections between sites?

  1. A

    MPLS

  2. B

    GRE

  3. C

    IPsec

  4. D

    SSL VPN

  5. E

    Frame Relay

Show answer and explanation

Correct answers: C, D

Explanation

To securely connect the branch office to the main office over the public internet, you need technologies that provide encryption and secure tunneling. IPsec is the most common protocol for creating encrypted site-to-site VPNs, while SSL VPNs are another secure option. MPLS and Frame Relay are private WAN technologies that do not utilize the public internet, and GRE lacks inherent encryption capabilities, making them unsuitable for this specific scenario.

  • A. Incorrect.

    MPLS (Multiprotocol Label Switching) is a WAN technology that provides private connectivity between sites but does not inherently offer encryption or secure tunnels over the public internet.

  • B. Incorrect.

    GRE (Generic Routing Encapsulation) is a tunneling protocol that can encapsulate a wide variety of network layer protocols. However, it does not provide encryption or security features by itself.

  • C. Correct.

    IPsec (Internet Protocol Security) is a widely used protocol suite for securing IP communications through encryption and authentication. It is ideal for creating secure tunnels over the public internet.

  • D. Correct.

    SSL VPN (Secure Sockets Layer Virtual Private Network) is commonly used for secure remote access and can also be employed for site-to-site secure communications over the internet.

  • E. Incorrect.

    Frame Relay is an older WAN technology that provides point-to-point connections but does not support encryption or secure tunneling over the public internet.

Timed practice exam

Take a 200-301 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam