Which pair represents VPN protocols that can secure a tunnel?

Which pair represents VPN protocols that can secure a tunnel?

• A. FTP and HTTP.
• B. ICMP and ARP.
• C. IPsec and TLS/SSL.
• D. DHCP and DNS.

Answer: (C)

VPNs create a secure tunnel by encapsulating and encrypting traffic across an untrusted network. IPsec fits this role at the network layer by encapsulating IP packets with encryption and authentication, forming a protected tunnel between endpoints. TLS/SSL also secure traffic, typically used to establish a secure channel for VPNs that run over the transport layer (think OpenVPN or SSL VPNs), where the tunnel is created through TLS handshakes and certificates. The other options don’t establish a VPN tunnel: FTP and HTTP are standard application protocols (and only secure if wrapped in their TLS equivalents, not by themselves forming a tunnel); ICMP and ARP are used for diagnostics and address resolution, not for tunneling; DHCP and DNS handle IP configuration and name resolution, not encryption or tunneling.

VPNs create a secure tunnel by encapsulating and encrypting traffic across an untrusted network. IPsec fits this role at the network layer by encapsulating IP packets with encryption and authentication, forming a protected tunnel between endpoints. TLS/SSL also secure traffic, typically used to establish a secure channel for VPNs that run over the transport layer (think OpenVPN or SSL VPNs), where the tunnel is created through TLS handshakes and certificates. The other options don’t establish a VPN tunnel: FTP and HTTP are standard application protocols (and only secure if wrapped in their TLS equivalents, not by themselves forming a tunnel); ICMP and ARP are used for diagnostics and address resolution, not for tunneling; DHCP and DNS handle IP configuration and name resolution, not encryption or tunneling.