350-401 Question 232
Single answerA network administrator is tasked with securing a branch office connected to the corporate network over a WAN. The administrator wants to ensure that traffic between the branch office and the corporate headquarters is encrypted, and only authorized devices can establish connections. Which technology should the administrator implement to achieve this?
- A
IPsec VPN with pre-shared keys
- B
Dynamic NAT on the branch office router
- C
802.1X port-based authentication
- D
GRE Tunnel without encryption
Show answer and explanation
Correct answer: A
Explanation
IPsec VPN with pre-shared keys is the ideal solution for securing traffic over a WAN. It encrypts data, ensuring confidentiality, and uses pre-shared keys for device authentication, preventing unauthorized devices from establishing connections. Other options like NAT, 802.1X, or GRE do not meet the encryption and authentication requirements for this scenario.
- A. Correct.
IPsec VPN with pre-shared keys ensures encryption of traffic between branch and corporate networks, providing confidentiality, integrity, and authentication. This is the correct choice for securing the WAN connection.
- B. Incorrect.
Dynamic NAT translates private IP addresses to public ones but does not provide encryption or device authentication. This is not suitable for securing the connection.
- C. Incorrect.
802.1X port-based authentication is used for securing access to the local network (LAN) by authenticating devices at the switch port level. It does not provide WAN-level encryption.
- D. Incorrect.
GRE Tunnel provides encapsulation but lacks encryption. Without encryption, traffic is vulnerable to interception, making it unsuitable for securing the WAN connection.