Which three of these are major scaling, sizing, and performance considerations for an IPsec design? (Choose three.)

Question

Options

• Aconnection speed
• Bnumber of remote sites
• Cfeatures to be supported
• Dtypes of devices at the remote site
• Ewhether packets are encrypted using 3DES or AES
• Fnumber of routes in the routing table at the remote site

• A
  83% (25)
• D
  10% (3)
• E
  3% (1)
• F
  3% (1)

Explanation

A (Connection speed) is correct: Encryption and decryption are CPU-intensive. The throughput of the links directly determines how much crypto processing is needed and whether hardware crypto acceleration is required. B (Number of remote sites) is correct: Each site requires IKE Phase 1 and Phase 2 SAs, and the headend must maintain all of them. A large number of sites strains headend memory, CPU, and SA table capacity. C (Features to be supported) is correct: Features like NAT-T, GRE over IPsec, QoS, or multicast add processing overhead and influence platform selection and design complexity. D is incorrect because device types at remote sites are a configuration concern, not a primary scaling/sizing driver. E is incorrect because AES is actually more efficient than 3DES on modern hardware, and both are widely supported - the choice between them is a security policy decision, not a major scaling consideration. F is incorrect because remote routing table size does not directly affect IPsec scaling.

No community discussion yet for this question.