Secure Network Administrationintermediate
In a route-based site-to-site IPsec VPN configuration, which component is specifically responsible for directing outbound traffic destined for the remote network into the VPN tunnel interface?
Answer
A static route pointing to the remote subnet via the tunnel interface
Explanation
### Why this is right
- **An Internet Key Exchange (IKE) gateway** is true because it defines peer and local gateway information used to negotiate the connection.
- **An Internet Protocol Security (IPsec) tunnel** is true because it binds the gateway to the tunnel interface and cryptographic profile.
- **A static route to the remote local area network (LAN)** is true because routing directs remote-destination traffic into the tunnel.
### The concept
VPN configuration has separate negotiation, protected-tunnel, and routing roles. Configuring only negotiation does not tell the firewall which destinations should use the VPN. A route supplies that forwarding decision.
### The other options
- **A host's desktop wallpaper setting**: this has no role in firewall VPN negotiation, encryption, or routing.
### Terms
- **IKE**: Internet Key Exchange, the protocol used to negotiate VPN security associations.
- **IPsec**: Internet Protocol Security, a suite used to protect network traffic.
- **LAN**: Local Area Network, the internal network at a site.
### Remember
A working VPN needs peer negotiation, an IPsec tunnel, and a route for remote traffic.
Related Questions
- Which statement best describes the protection a Virtual Private Network (VPN) provides?(basic)
- A VPN that encrypts traffic also guarantees that the applications on both endpoints are safe.(basic)
- Explain why a split-tunnel design can reduce central inspection, and identify the traffic affected.(advanced)
- Select ALL protection goals a VPN can support directly through the mechanisms described in the course.(intermediate)
- Compare remote-access and site-to-site VPN designs, including their endpoints and a suitable example of each.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free