IBM Exam C1000-172 Topic 1 Question 17 Discussion

A security feature of IBM Cloud VPN for virtual private cloud (VPC) service is Perfect Forward Secrecy (PFS).

Perfect Forward Secrecy (PFS): PFS ensures that the compromise of one session key does not compromise the confidentiality of past sessions. It provides additional security for encrypted communications by generating unique keys for each session, making it a critical feature for VPN services.

IBM Cloud VPN for VPC: This service utilizes PFS to secure communication between the cloud environment and external networks, ensuring high levels of data protection and encryption.

Reference from IBM Cloud Professional Architect Materials:

The IBM documentation on IBM Cloud VPN describes PFS as a fundamental security feature for protecting data transmitted over the network.

Other options are incorrect:

A . Passive Peer Detection is not a security feature.

B . RSA key exchange is a cryptographic algorithm but does not describe a VPN-specific security feature.

D . Post-shared key is not a relevant term.