Vered is a Security Administrator preparing to migrate her organization’s IKE VPNs from preshared secrets to PKI with certificates. Vered’s organization has client-to-site VPNs between
SecureClients and Enforcement Modules, and site-to-site VPNs between Enforcement Modules.
Vered will use the VPN-1/FireWall-1 Internal Certificate Authority (ICA), to generate and maintain
certificates. Which of the following statements is TRUE?
Vered can:

A.
Install and configure an OPSEC-certified Certificate Authority product. Vered cannot use the
Internal Certificate Authority (ICA) to accomplish this task.

B.
Migrate the organization’s site-to-site VPNs, but she cannot migrate the organization’s client-tosite VPNs.

C.
Either migrate the PKI with certificates for her VPNs, or use the ICA for certificate generation
and maintenance. Vered cannot do both.

D.
Migrate both the site-to-site VPNs and the client-to-site VPNs. She can use the ICA to generate
and maintain certificates.

E.
Migrate the organization’s client-to-site VPNs, if she moves from SecureClient to SecuRemote.
She cannot migrate the site-to-site VPNs.