Check_Point
156-215.71 · Question #105
Why are certificates preferred over pre-shared keys in an IPsec VPN?
The correct answer is D. Weak Security. PSK are static and can be brute-forced. See the full explanation below for the reasoning.
Question
Why are certificates preferred over pre-shared keys in an IPsec VPN?
Options
- AWeak scalability: PSKs need to be set on each and every Gateway
- BWeak performance: PSK takes more time to encrypt than Drffie-Hellman
- CWeak security: PSKs can only have 112 bit length.
- DWeak Security. PSK are static and can be brute-forced
How the community answered
(28 responses)- A7% (2)
- B4% (1)
- C11% (3)
- D79% (22)
Community Discussion
No community discussion yet for this question.