Will has been asked to recommend a VPN protocol for his company to connect to the cloud service provider. Which protocol could he rule out as an option for this connection?

Will has been asked to recommend a VPN protocol for his company to connect to the cloud service provider. Which protocol could he rule out as an option for this connection?

• A. L2TP
• B. TFTP
• C. SSL VPN
• D. IPsec

Answer: (B)

VPN connections rely on protocols designed to create a secure tunnel and protect data as it travels between the user and the cloud service. TFTP is just a simple file transfer protocol; it has no built-in authentication or encryption and it does not establish a secure tunnel. That makes it unsuitable for establishing a VPN connection to a cloud provider. The other options are VPN-capable. L2TP creates a tunnel and is commonly used with IPsec to provide encryption for that tunnel. IPsec itself handles secure transmission at the IP layer, providing confidentiality, integrity, and authenticity. SSL VPN uses TLS to secure remote access over the web, which many organizations deploy for user connectivity. So, among the choices, TFTP is not appropriate for a VPN, which is why it would be ruled out for connecting to the cloud service provider.

VPN connections rely on protocols designed to create a secure tunnel and protect data as it travels between the user and the cloud service. TFTP is just a simple file transfer protocol; it has no built-in authentication or encryption and it does not establish a secure tunnel. That makes it unsuitable for establishing a VPN connection to a cloud provider.

The other options are VPN-capable. L2TP creates a tunnel and is commonly used with IPsec to provide encryption for that tunnel. IPsec itself handles secure transmission at the IP layer, providing confidentiality, integrity, and authenticity. SSL VPN uses TLS to secure remote access over the web, which many organizations deploy for user connectivity. So, among the choices, TFTP is not appropriate for a VPN, which is why it would be ruled out for connecting to the cloud service provider.