nerdexam
Check_Point

156-215.75 · Question #383

Why are certificates preferred over pre-shared keys in an IPsec VPN?

The correct answer is D. Weak Security: PSK are static and can be brute-forced. See the full explanation below for the reasoning.

Question

Why are certificates preferred over pre-shared keys in an IPsec VPN?

Options

  • AWeak scalability: PSKs need to be set on each and every Gateway
  • BWeak performance: PSK takes more time to encrypt than Drffie-Hellman
  • CWeak security: PSKs can only have 112 bit length.
  • DWeak Security: PSK are static and can be brute-forced.

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    9% (4)
  • D
    84% (38)

Community Discussion

No community discussion yet for this question.

Full 156-215.75 Practice