4A0-100 practice question 5 of 10

Which of the following is NOT a characteristic of a Virtual Private Network (VPN)?

Full set: 40 questions
Answer options
A: Each customer's traffic is isolated from other customers.
B: Service providers utilize a shared infrastructure to support multiple VPNs.
C: Customer data is altered as it traverses a VPN. Correct answer
D: A VPN is created specifically to meet the requirements of each customer.
Correct Answer:
C. Customer data is altered as it traverses a VPN.
Explanation

A core function of a Virtual Private Network (VPN) is to provide transparent connectivity for a customer across a shared service provider infrastructure. This transparency means the customer's data payload is encapsulated for transport but is not modified or altered in any way. The original customer packet is delivered to the destination site exactly as it was sent from the source site. Altering the customer's data would violate the integrity of the communication and disrupt applications, defeating the purpose of the transport service.

Why Incorrect

A. Traffic isolation is a fundamental characteristic of a VPN, ensuring that one customer's traffic is logically separated and secured from all other customers using the same shared infrastructure.
B. The "Virtual" aspect of a VPN explicitly means it is a logical network built upon a shared physical infrastructure, allowing service providers to offer private network services cost-effectively.
D. VPNs are highly customizable and are provisioned to meet the specific requirements of each customer, including topology (e.g., hub-and-spoke, full-mesh), bandwidth, and Quality of Service (QoS).

References

1. Nokia Networks. (2015). Nokia Scalable IP Networks Self-Study Guide: Preparing for the Network Routing Specialist I (NRS I) Certification (4A0-100). Chapter 7, "Virtual Private Network (VPN) Services," Section 7.1, "VPN Concepts." This section explains that a VPN emulates a private network over a shared infrastructure. The process described involves encapsulating customer packets for transport, which preserves the original customer data without alteration.

2. Rosen, E., & Rekhter, Y. (2006). BGP/MPLS IP Virtual Private Networks (VPNs). RFC 4364. Section 1, "Introduction." The document describes the architecture for provider-provisioned VPNs, where the goal is to forward packets from one customer site to another. The mechanisms detailed, such as MPLS label stacking, are designed to transport the original IP packet transparently without modifying its content.

3. Kurose, J. F., & Ross, K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. Chapter 8.3, "Network Layer Security: IPsec and Virtual Private Networks." The text describes how IPsec, a common VPN technology, operates in tunnel mode by taking an entire IP datagram, encrypting it, and appending a new IP header. This process encapsulates the original data, it does not alter it.

Scroll to Top