A virtual private networking solution that uses digital certificates to identify and host and establish secure tunnels for network traffic is a?

A virtual private networking solution that uses digital certificates to identify and host and establish secure tunnels for network traffic is a?

• A. transport layer security (TLS) VPN
• B. IPsec
• C. PPTP
• D. VPN

Answer: (A)

This question is about how a VPN authenticates parties and protects traffic using certificate-based security. A TLS VPN (also called an SSL VPN) relies on the TLS/SSL protocol to create an encrypted tunnel between client and gateway, and it uses digital certificates to identify the server (and often the client) during the TLS handshake. That certificate-based identity is what ensures both ends are who they claim to be before any data travels, and the TLS session then encrypts all traffic passing through the tunnel. IPsec can also use certificates for authentication, but it operates at the IP layer and is described in terms of its own tunnel and security association mechanisms, not specifically as a TLS/SSL-based web-friendly tunnel. PPTP is an older protocol with weaker security and does not center on certificate-based authentication. A generic “VPN” label is too vague and doesn’t specify the certificate-driven TLS approach. So the description best fits a TLS VPN.

This question is about how a VPN authenticates parties and protects traffic using certificate-based security. A TLS VPN (also called an SSL VPN) relies on the TLS/SSL protocol to create an encrypted tunnel between client and gateway, and it uses digital certificates to identify the server (and often the client) during the TLS handshake. That certificate-based identity is what ensures both ends are who they claim to be before any data travels, and the TLS session then encrypts all traffic passing through the tunnel.

IPsec can also use certificates for authentication, but it operates at the IP layer and is described in terms of its own tunnel and security association mechanisms, not specifically as a TLS/SSL-based web-friendly tunnel. PPTP is an older protocol with weaker security and does not center on certificate-based authentication. A generic “VPN” label is too vague and doesn’t specify the certificate-driven TLS approach. So the description best fits a TLS VPN.