The correct answer isA. IKEv1 Aggressive Mode performs Phase 1 negotiation usingthree packets. Check Point documentation explains that Main Mode and Aggressive Mode are IKEv1 Phase 1 modes. If Aggressive Mode is not selected, the Security Gateway uses Main Mode by default, which performs IKE negotiation with six packets. Aggressive Mode reduces this to three packets, making it faster but less protected than Main Mode. Option B is wrong because four messages is associated with the normal IKEv2 initial exchange, not IKEv1 Aggressive Mode. Option C is not a valid count for the standard aggressive exchange. Option D is the count for IKEv1 Main Mode, not Aggressive Mode. The CCSE memory rule is direct and should not be overcomplicated:IKEv1 Main Mode = 6 packets; IKEv1 Aggressive Mode = 3 packets; IKEv2 initial exchange = 4 messages. Reference topic:IPsec and IKE / Phase I Modes.
========
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit