2V0-41.24 Question 188
Single answerAn organization is using VMware NSX to secure and segment its network. The administrator needs to establish a secure site-to-site connection between two data centers using an IPSec VPN. During the configuration process, the administrator is prompted to configure the encryption algorithm. Which of the following encryption algorithms is supported by NSX IPSec VPN and provides the highest level of security?
- A
DES
- B
3DES
- C
AES-128
- D
AES-256
Show answer and explanation
Correct answer: D
Explanation
VMware NSX supports multiple encryption algorithms for IPSec VPNs. AES-256 is considered the most secure option due to its 256-bit key length, providing strong protection against brute-force attacks. While AES-128 and 3DES are also supported, AES-256 is preferred for environments where the highest level of security is a priority. DES is outdated and not recommended for any secure deployment.
- A. Incorrect.
DES (Data Encryption Standard) is an outdated and insecure encryption algorithm that is no longer recommended for modern VPN deployments due to its vulnerability to brute-force attacks.
- B. Incorrect.
3DES (Triple DES) provides better security than DES by applying the DES algorithm three times. However, it is considered less secure and slower compared to AES-256.
- C. Incorrect.
AES-128 (Advanced Encryption Standard with a 128-bit key) is a strong encryption algorithm that is more secure than DES and 3DES. However, AES-256 provides a higher level of security.
- D. Correct.
AES-256 (Advanced Encryption Standard with a 256-bit key) is the most secure option among the listed choices. It offers the highest level of encryption and is recommended for secure IPSec VPN configurations.