nerdexam
Check_Point

156-215.77 · Question #251

Why are certificates preferred over pre-shared keys in an IPsec VPN?

The correct answer is B. Weak Security: PSK are static and can be brute-forced. See the full explanation below for the reasoning.

Question

Why are certificates preferred over pre-shared keys in an IPsec VPN?

Options

  • AWeak security: PSKs can only have 112 bit length.
  • BWeak Security: PSK are static and can be brute-forced.
  • CWeak scalability: PSKs need to be set on each and every Gateway.
  • DWeak performancE. PSK takes more time to encrypt than Diffie-Hellman.

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    83% (15)
  • D
    11% (2)

Community Discussion

No community discussion yet for this question.

Full 156-215.77 Practice