ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 300-209 All Questions

View all questions & answers for the 300-209 exam
Go to Exam

Exam 300-209 topic 1 question 60 discussion

Actual exam question from Cisco's 300-209
Question #: 60
Topic #: 1
[All 300-209 Questions]

Which NGE IKE Diffie-Hellman group identifier has the strongest cryptographic properties?

  • A. group 10
  • B. group 24
  • C. group 5
  • D. group 20
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/15-2mt/sec-cfg-ikev2-flex.html#GUID-6F6D8166-508A-4669-9DDC-4FE7AE9B9939
http://www.cisco.com/c/en/us/about/security-center/next-generation-cryptography.html#9
by Dante8880 at Nov. 17, 2022, 1:02 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Dante8880
2 years, 5 months ago
According to Cisco Use the following guidelines when configuring Internet Key Exchange (IKE) in VPN technologies: Avoid IKE Groups 1, 2, and 5. Use IKE Group 15 or 16 and employ 3072-bit and 4096-bit DH, respectively. When possible, use IKE Group 19 or 20. They are the 256-bit and 384-bit ECDH groups, respectively. Use AES for encryption.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago