350-401 Question 104
Single answerYou are tasked with establishing a secure connection between two branch offices over the internet. The solution must allow for the use of dynamic routing protocols between the sites while also encrypting the data. Which tunneling solution should you implement?
- A
GRE over IPsec
- B
IPsec Tunnel Mode
- C
GRE Tunnel without IPsec
- D
MPLS VPN
Show answer and explanation
Correct answer: A
Explanation
GRE over IPsec is the correct solution because it combines the advantages of both technologies: GRE provides support for dynamic routing protocols and multicast traffic, while IPsec ensures encryption and data security over the public internet. This makes it the ideal choice for securely connecting two branch offices with dynamic routing requirements.
- A. Correct.
Correct. GRE over IPsec allows for dynamic routing protocols to function over the tunnel while ensuring data encryption through IPsec.
- B. Incorrect.
Incorrect. IPsec Tunnel Mode provides encryption but does not support dynamic routing protocols natively, making it unsuitable for this requirement.
- C. Incorrect.
Incorrect. GRE Tunnel without IPsec supports dynamic routing protocols but lacks encryption, which does not meet the security requirement.
- D. Incorrect.
Incorrect. MPLS VPN is a separate WAN technology and does not involve GRE or IPsec tunneling. It does not meet the specific requirements of this scenario.