Cisco CCNA mock exam questions sample test – Question 48

.Which of the following is NOT a true statement regarding Virtual Private Networks (VPNs)?

A. A VPN is a method of securing private data over public networks
B. IPsec is a method for providing security over VPN
C. Frame Relay is a Layer 3 VPN technology
D. IPsec provides packet-level encryption
E. A Cisco VPN solution provides increased security, reduced cost, and scalability

Correct Answer: C

Explanation:
Frame Relay is a Layer 2 VPN technology, providing connectivity over switched carrier Wide Area Networks (WANs). Packets are encapsulated in Frame Relay frames, and assigned Data Link Connection Identifiers (DLCIs) to identify to the local Frame Relay switch the virtual circuit (VC) that the data should follow.

A VPN is a method of securing private data over public networks (such as the Internet), so this is a true statement.

IPsec is a security framework that provides security for data traveling over VPNs, so this is a true statement. It is an open standard protocol framework that is used to secure end-toend communications.

IPsec allows for encryption at the packet level (Layer 3) when configured in tunnel mode, so this is a true statement.

VPN solutions such as those supported by Cisco ASA firewalls and Cisco integrated routers provide the following benefits:
-Lower desktop support costs
-Threat protection
-Flexible and cost-effective licensing
-Reduced cost and management complexity

Objective:
WAN Technologies
Sub-Objective:
Describe WAN access connectivity options
References:
Cisco > Internetworking Technology Handbook > Frame Relay
Cisco > Internetworking Technology Handbook > Virtual Private Networks (VPNs)