(Topic 15) If you need strong protection for the encryption of user data, what option would be the BEST choice?

Question

Options

• AUse Diffie-Hellman for key construction and pre-shared keys for Quick Mode. Choose
• BWhen you need strong encryption, IPsec is not the best choice. SSL VPN's are a better
• CUse certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and
• DDisable Diffie-Hellman by using stronger certificate based key-derivation. Use AES-256

• A
  5% (3)
• B
  15% (8)
• C
  71% (39)
• D
  9% (5)

Explanation

Fill in the blank. To remove site-to-site IKE and IPSEC keys you would enter command ____ ___ and select the option to delete all IKE and IPSec SA's.

No community discussion yet for this question.