Which transform set provides the best protection?
- crypto ipsec transform-set ESP-DES-SHA esp-aes-256 esp-sha-hmac
- crypto ipsec transform-set ESP-DES-SHA esp-3des esp-sha-hmac
- crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
- crypto ipsec transform-set ESP-DES-SHA esp-aes esp-des esp-sha-hmac
Explanation: DES uses 56-bit keys. 3DES uses 56-bit keys, but encrypts three times. AES uses 128-bit keys. AES-256 uses 256-bit keys and is the strongest.
Exam with this question: CCNA Security Chapter 8 Exam Answers
Exam with this question: CCNA Security Certification Practice Exam Answers
Please login or Register to submit your answer