What are valid authentication methods for mutual authenticating the VPN gateways?

Question

Options

• APre-shared Secret and PKI Certificates
• BPKI Certificates and Kerberos Tickets
• CPre-Shared Secrets and Kerberos Ticket
• DPKI Certificates and DynamiciD OTP

• A
  71% (22)
• B
  16% (5)
• C
  3% (1)
• D
  10% (3)

Explanation

This answer is correct because these are two valid methods for mutually authenticating the VPN gateways, which means that both sides of the communication verify each other's identity using a shared secret or a public key certificate. A pre-shared secret is a password or a passphrase that both gateways know and use to encrypt and decrypt the VPN traffic. A PKI certificate is a digital document that contains the public key and other information that helps identify the gateway, such as the issuer, the subject, and the expiration date. The certificate is signed by a trusted certificate authority (CA) that vouches for the authenticity of the gateway. The other answers are not correct because they either include invalid or irrelevant methods for mutual authentication. PKI certificates and Kerberos tickets are not compatible methods for mutual authentication, because Kerberos tickets are issued by a Kerberos server and not by a CA. Pre- shared secrets and Kerberos tickets are also not compatible methods for mutual authentication, because they use different protocols and encryption algorithms. PKI certificates and DynamiciD OTP are not valid methods for mutual authentication, because DynamiciD OTP is a one-time password that is used for user authentication, not for gateway authentication.

No community discussion yet for this question.