Your manager requires you to setup a VPN to a new business partner site. The administrator from
the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1
and AES 256 for IKE phase 2. Why is this a problematic setup?

Why are certificates preferred over pre-shared keys in an IPsec VPN?

What is a possible reason for the IKE failure shown in this screenshot?

When using an encryption algorithm, which is generally considered the best encryption method?

Which do you configure to give remote access VPN users a local IP address?

You install and deploy GAiA with default settings. You allow Visitor Mode in the Gateway object’s
Remote Access properties and install policy; but SecureClient refuses to connect. What is the
cause of this?

With deployment of SecureClient, you have defined in the policy that you allow traffic only to an
encrypted domain. But when your mobile users move outside of your company, they often cannot
use SecureClient because they have to register first (i.e. in Hotel or Conference rooms). How do
you solve this problem?

What statement is true regarding Visitor Mode?

When attempting to connect with SecureClient Mobile you get the following error message:
The certificate provided is invalid. Please provide the username and password.
What is the probable cause of the error?

If you were NOT using IKE aggressive mode for your IPsec tunnel, how many packets would you
see for normal Phase 1 exchange?