VPN Protocols (PPTP, L2TP, IPSec, SSL/TLS) and Disk Encryption ECES Practice Questions (Page 11)

Questions 51–51

1. 51application · medium

   A small business is setting up a remote-access VPN for a few employees. They have an older router that only supports PPTP. The administrator is aware of PPTP's weaknesses but decides to use it temporarily. Which of the following is a known security weakness of PPTP that the administrator should be most concerned about?

   • AIt operates only at the application layer, exposing all traffic to the network
   • BIt requires a public key infrastructure (PKI) that is difficult to manage
   • CIt cannot traverse NAT devices, making it unusable in most networks
   • DWeak authentication protocols such as MS-CHAPv2 and lack of strong encryption
   Reveal Solution Discussion Select an answer first