CheckPoint Exam Questions

what can you conclude about this community?

You have a mesh VPN Community configured to create a site-to-site VPN.

Given the displayed VPN properties, what can you conclude about this community?

A.
Change the data-integrity setting for this VPN Community because MD5 is oncompatible with
AES.

B.
Changing the setting Perform key exchange encryption with from AES-256 to 3DES will
enhance the VPN Community’s security , and reduce encryption overhead.

C.
The VPN Community will perform IKE Phase 1 key-exchange encryption using the longest key
Security Gateway R76 supports.

D.
Changing the setting Perform IPsec data encryption with from AES-128 to 3Des will increase
the encryption overhead.