CCNP Drill: Do you know where MACsec beats IPsec?
MACsec vs IPsec is a classic Cisco exam battleground. Drop your choice in the comments before the timer runs out!
The question
Which traffic does MACsec protect on a link that native IPsec cannot encrypt?
The answer
A Layer 2 non-IP and control traffic
Right — MACsec operates at Layer 2, encrypting everything after the MAC header, including ARP and non-IP frames. Don't fall for B: MACsec is strictly hop-by-hop, not multi-hop. Follow for tomorrow's rep.
Exam tip
Read what the question is actually asking before looking at the options. The wrong answers here are ones candidates genuinely pick — each is true of something adjacent, just not of what was asked.