CCNP Security Question of the Week: IPsec VPN Tunnels

June 26, 2015 Johnny Bass Cisco, Cloudera, Featured, Professional Development, Project Management, Routing & Switching, Technology, Training in Business

When deploying remote-access IPsec VPN tunnels, what is the key benefit of digital certificates?

A. Resiliency
B. Simplification
C. Scalability
D. Centralization

Reveal Answer

Answer: D.

Digital certificates provide many benefits when compared to pre-shared keys, including the following:

Centrally controlled on a digital certificate server, also known as a Certificate Authority (CA), or Public Key Infrastructure (PKI) server.

Built-in expiration dates.

Do not require IPSec Aggressive mode, which is required for the less secure pre-shared static keys with AAA.

Cannot be copied by an attacker, unlike other authentication measures, such as pre-shared keys.

Related Resources
Cisco White Papers

Related Course
CCNP Security e-Camp

CCNP Security Question of the Week Series

CCNP Security Question of the Week: Cisco ASA Security Context
CCNP Security Question of the Week: Authenticating ASDM Users
CCNP Security Question of the Week: Layer 5–7 Policy Maps
CCNP Security Question of the Week: 802.1X
CCNP Security Question of the Week: IPS Updates
CCNP Security Question of the Week: IPsec VPN Tunnels

Please support our Sponsors here :