Which option is the stronger hash algorithm used by IKE?
- SHA-1
- DH group 2
- MD5
- DH group 5
Explanation: SHA-1 is a stronger hash algorithm than MD5. While even newer and more secure hash algorithms exist (such as SHA-256, SHA-384, and SHA-512), SHA-1 is explicitly preferred over MD5 in IKE policies to ensure better security.
It is important to note that DH group 2 and DH group 5 are not hash algorithms; rather, they are Diffie-Hellman groups used to determine the strength of the encryption-key-determination algorithm. While DH group 5 is stronger than DH group 2, they serve a different function in the IKE policy than hashing.
Related exam: Modules 17 – 20: Checkpoint Exam: Virtualization and Network Services Answers (CCNP ENCOR v9)
