Valid 400-007 Dumps shared by EduDump.com for Helping Passing 400-007 Exam! EduDump.com now offer the newest 400-007 exam dumps, the EduDump.com 400-007 exam questions have been updated and answers have been corrected get the newest EduDump.com 400-007 dumps with Test Engine here:
Two companies need to implement an extranet overlay network solution by using a VPN tunnel over the internet to use each other's HTTP REST APIs. The solution must only provide data integrity because data confidentality will be covered at the application leyer. The existing firewall devices will be used as VPN endpoints for the tunnel, but they have limited available resources. Which type of VPN tunnel must be deployed for the extranet service?
Correct Answer: B
The requirement is to provide data integrity only, not confidentiality, because confidentiality is handled at the application layer. IPSec AH provides authentication and integrity for the IP packets without encrypting the payload, ensuring data integrity but not confidentiality. Since the firewall devices have limited resources, using IPSec AH (which only provides integrity and authentication but no encryption) reduces processing overhead compared to ESP. Therefore, IPSec AH is the appropriate choice for a VPN tunnel that ensures data integrity without confidentiality, suitable for resource-constrained firewall endpoints.