312-50V9 Question #99: Real Exam Question with Answer & Explanation

The correct answer is C: 1536 bit key. Diffie-Hellman groups are predefined prime modulus sizes used during IKE key exchange, with each group number corresponding to a specific bit length.

Question

Diffie-Hellman (DH) groups determine the strength of the key used in the key exchange process. Which of the following is the correct bit size of the Diffie-Hellman (DH) group 5?

Options

A768 bit key
B1025 bit key
C1536 bit key
D2048 bit key

Explanation

Diffie-Hellman groups are predefined prime modulus sizes used during IKE key exchange, with each group number corresponding to a specific bit length.

Common mistakes.

A. 768 bits corresponds to DH Group 1, the weakest and oldest group, not Group 5.
B. 1025 bits is not a valid standard DH group size; no defined DH group uses this modulus.
D. 2048 bits corresponds to DH Group 14, which is stronger than Group 5 and defined in RFC 3526.

Concept tested. Diffie-Hellman group modulus bit sizes

Reference. https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/217432-configure-ike-version-2-ikev2-for-site.html

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice