300-420 Question 181
Select 4An organization is deploying a hybrid cloud solution that requires secure communication between their on-premises data center and a cloud provider. They want to implement a site-to-site VPN solution to ensure data confidentiality and integrity. Which key considerations should be addressed during the design phase to ensure a successful deployment?
- A
Evaluate the compatibility of encryption protocols between the on-premises VPN appliance and the cloud provider's VPN gateway.
- B
Ensure the same ISP is used on both on-premises and cloud sides to reduce latency.
- C
Plan for proper key exchange mechanisms like IKEv2 to secure the VPN tunnel.
- D
Validate the bandwidth requirements to avoid performance bottlenecks over the VPN tunnel.
- E
Implement routing protocols like BGP to dynamically exchange routes over the VPN.
Show answer and explanation
Correct answers: A, C, D, E
Explanation
Designing a site-to-site VPN for hybrid cloud solutions requires addressing key factors such as encryption protocol compatibility, secure key exchange mechanisms, bandwidth planning, and dynamic routing protocols like BGP. While using the same ISP may reduce latency, it is not an essential consideration for the VPN's functionality or security.
- A. Correct.
This is correct because encryption protocol compatibility ensures the VPN tunnel can be established securely between on-premises and cloud environments.
- B. Incorrect.
This is incorrect because while having the same ISP may reduce latency, it is not a critical design consideration for site-to-site VPN functionality.
- C. Correct.
This is correct because IKEv2 is widely used for key exchanges in VPNs, ensuring secure and efficient tunnel establishment.
- D. Correct.
This is correct because insufficient bandwidth could lead to performance issues, so bandwidth requirements must be validated during the design phase.
- E. Correct.
This is correct because routing protocols like BGP enable dynamic route exchange, which is critical for hybrid solutions with changing network topologies.