Exhibit

Jacob configured a meshed VPN Community, with VPN properties set as shown below. Which of
the following statements are TRUE? (Choose two)

A.
Jacob is using the default VPN property settings for a VPN-1/FireWall-1 meshed VPN
Community.

B.
Jacob’s community will perform IKE Phase 1 key-exchange encryption, using the longest key
VPN-1/FireWall-1 supports.

C.
Jacob must change the data-integrity settings for this VPN Community. MD5 is incompatible
with AES.

D.
If Jacob changes the setting Perform IPsec data encryption with: from AES-128 to 3DES, he
will increase the encryption overhead.

E.
If Jacob changes the setting, Perform key exchange encryption with: from 3DES to DES, he will
enhance the VPN Community’s security and reduce encryption overhead.

Explanation:

Note: Uncertainty due to missing exhibit. B, D also possible.