You are designing a connectivity solution between on-premises infrastructure and Amazon VPC. Your server’s on-premises will be communicating with your VPC instances. You will be establishing IPSec tunnels over the internet. You will be using VPN gateways and terminating the IPsec tunnels on AWS-supported customer gateways. Which of the following objectives would you achieve by implementing an IPSec tunnel as outlined above? Choose 4 answers from the options below.

Answer options:

A.Fully End-to-end protection of data in transit
B.Fully End-to-end Identity authentication
C.Data encryption across the Internet
D.Protection of data in transit over the Internet
E.Peer identity authentication between VPN gateway and customer gateway
F.Data integrity protection across the Internet

Answer – C, D, E and F
Option C is correct. Data that is transmitted through the IPSec tunnel is encrypted.
Option D is correct as it protects data in transit over the internet.
Option E is correct. Peer identity authentication between VPN gateway and customer gateway is required for implementing VPN IPSec tunnel.
Option F is correct. Integrity of data transmitted over the internet is also possible via IPSec tunnel.
IPSec is a widely adopted protocol that can be used to provide end-to-end protection for data.
Options A and B are invalid because there is no complete guarantee of fully end-to-end date protection or identity authentication using IPSec.
For more information on IPSec, please visit the following URL:
https://en.wikipedia.org/wiki/IPsec
https://docs.aws.amazon.com/vpc/latest/adminguide/Introduction.html