You are the VPN-1/Firewall-1 administrator for a company who’s extranet requires encryption. You
must an encryption scheme with the following features:
Portability Standard
Key Management Automatic, external PKI
Session Keys Change at configured times during a connection’s life time
Which encryption scheme do you choose?

A.
Rj indal

B.
FWZ

C.
IKE

D.
IKE

E.
Triple DES.

F.
Manual IPSec.

Explanation:

: Those are features provided by IKE, it provides support for external PKI for the management of
certificates and renewal of the session keys through the life of the connection, you can configure
the interval, this info can be check at Page 7.17 of CCSE NG Official Courseware. (VPN1-FW1
Management II NG FP-1) .