Which tunnel protocol secures overlay traffic between WAN Edge devices?

Which tunnel protocol secures overlay traffic between WAN Edge devices?

• A. GRE
• B. CAPWAP
• C. VXLAN
• D. DTLS/TLS

Answer: (D)

Protecting overlay traffic between WAN Edge devices requires a secure tunnel that provides encryption and authentication. DTLS/TLS fits this role because it encrypts the data, ensures integrity, and authenticates the communicating endpoints, so the overlay traffic cannot be read or tampered with as it traverses the network. GRE and VXLAN are encapsulation methods that carry the payload but don’t offer encryption by themselves. CAPWAP is a protocol used for wireless AP management, not for securing inter-edge overlay tunnels. So the secure option for overlay traffic is DTLS/TLS.

Protecting overlay traffic between WAN Edge devices requires a secure tunnel that provides encryption and authentication. DTLS/TLS fits this role because it encrypts the data, ensures integrity, and authenticates the communicating endpoints, so the overlay traffic cannot be read or tampered with as it traverses the network. GRE and VXLAN are encapsulation methods that carry the payload but don’t offer encryption by themselves. CAPWAP is a protocol used for wireless AP management, not for securing inter-edge overlay tunnels. So the secure option for overlay traffic is DTLS/TLS.