Hybrid Authentication allows VPN-1/Firewall-1 NG to authenticate SecuRemote/SecureClient,
using which of the following?

A.
RADIUS

B.
3DES

C.
TACACS

D.
Any authentication method supported by VPN-1/Firewall-1.

E.
Both A and C.

Explanation:
“Hybrid Authentication for IKE” is just that, it allows you to use existing authentication servers
supported by VPN1/FW1 as shared secrets for IKE. This is supported since FW 1 4.1 SP1 and
SecuRemote 4153. See Page 382 of “Essential Checkpoint Firewall 1” from Dameon Welch.
Incorrect Answers:
A: This is not the most complete answer, the most complete is answer “D”.
B: This is not a kind of authentication server, its an encryption algorithm.
C: This is not the most complete answer, the most complete is answer “D”.
E: This is not the most complete answer, the most complete is answer “D”.