Where do you specify what type of encryption is used for a PPP based tunnel?

• A. Manual selection
• B. Highest match between client and server
• C. Automatic
• D. Default gateway

Answer: (B)

PPP-based tunnels establish encryption through negotiation between the two peers. Neither side fixes the algorithm in advance; instead, each end advertises its supported encryption options and the tunnel settles on the strongest common option. That’s why encryption is determined by the highest match between client and server—the strongest cipher both sides support is automatically chosen during setup. You can influence the result by configuring what each side allows, but you don’t pick a single cipher in the tunnel configuration itself.