Check_Point
156-215.75 · Question #370
If you need strong protection for the encryption of user data, what option would be the BEST choice?
The correct answer is C. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol. See the full explanation below for the reasoning.
Question
If you need strong protection for the encryption of user data, what option would be the BEST choice?
Options
- AWhen you need strong encryption, IPsec is not the best choice. SSL VPNs are a better choice.
- BDisable Diffie Hellman by using stronger certificate based key-derivation. Use AES-256 bit on all
- CUse certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.
- DUse Diffie Hellman for key construction and pre-shared keys for Quick Mode. Choose SHA in Quick
How the community answered
(29 responses)- A10% (3)
- B3% (1)
- C79% (23)
- D7% (2)
Community Discussion
No community discussion yet for this question.