2V0-41.24 Question 191
Select 3An organization has deployed VMware NSX to manage its network infrastructure. They need to establish secure communication between two data centers over the public internet. To achieve this, the organization decides to use IPSec-based VPNs. Which aspects of IPSec-based technologies must be configured to ensure a secure and functional VPN connection between the two data centers?
- A
Authentication method, such as pre-shared keys or certificates
- B
IKE (Internet Key Exchange) protocol for key management
- C
GRE (Generic Routing Encapsulation) tunnels for data encapsulation
- D
Encryption algorithms, such as AES, for securing data
- E
Routing protocols, such as OSPF or BGP, for establishing VPN connections
Show answer and explanation
Correct answers: A, B, D
Explanation
To establish a secure IPSec-based VPN, it is necessary to configure authentication methods (e.g., pre-shared keys or certificates) to ensure trust between peers, use the IKE protocol for secure key exchange and management, and select appropriate encryption algorithms like AES to protect data confidentiality. While GRE and routing protocols can play complementary roles in broader networking scenarios, they are not essential components of IPSec VPN configuration.
- A. Correct.
Authentication methods, such as pre-shared keys or certificates, are crucial in IPSec-based VPNs to verify the identity of the peers and establish trust before the tunnel is created.
- B. Correct.
IKE (Internet Key Exchange) is an integral part of IPSec VPNs, as it handles the negotiation of security associations and manages the encryption keys for secure communication.
- C. Incorrect.
GRE is not a component of IPSec. While GRE can be used in conjunction with IPSec in some scenarios, it is not a core requirement for establishing an IPSec-based VPN.
- D. Correct.
Encryption algorithms, like AES, are used in IPSec to ensure the confidentiality of data transmitted over the VPN tunnel.
- E. Incorrect.
Routing protocols, such as OSPF or BGP, are used to exchange routing information but are not part of configuring or establishing IPSec-based VPNs.