Which of the following could occur when both strong and weak ciphers are configured on a VPN concentrator? (Select TWO)

An attacker can perform a downgrade attack by manipulating the handshake process to force the client and VPN concentrator to negotiate and use a weaker, less secure cipher suite that is still supported.

While resource exhaustion can be an attack vector, simply configuring both strong and weak ciphers does not inherently make a connection vulnerable to resource exhaustion; it primarily exposes the communication to cryptographic weaknesses.

When weak ciphers are employed, they are more susceptible to cryptanalysis, potentially allowing an attacker to decrypt, modify, or forge data without detection, thereby compromising the integrity of the transmitted information.

L2TP is a tunneling protocol, not a cipher suite, and a VPN concentrator would not revert to a different underlying protocol simply due to the configuration of different cipher strengths within its current protocol.

IPSec sequence numbers, typically 32-bit, are fixed parameters for anti-replay protection, and their bit-size is not altered by the strength of the cryptographic ciphers configured on a VPN concentrator.