Which two next-generation encryption algorithms does Cisco recommend? (Choose two.)

Which two next-generation encryption algorithms does Cisco recommend? (Choose two.)
A . AES
B . 3DES
C . DES
D . MD5
E . DH-1024
F . SHA-384

View Answer

Answer: A,F

Explanation:

The Suite B next-generation encryption (NGE) includes algorithms for authenticated encryption, digital signatures, key establishment, and cryptographic hashing, as listed here:

+ Elliptic Curve Cryptography (ECC) replaces RSA signatures with the ECDSA algorithm + AES in the Galois/Counter Mode (GCM) of operation

+ ECC Digital Signature Algorithm

+ SHA-256, SHA-384, and SHA-512

Source: Cisco Official Certification Guide, Next-Generation Encryption Protocols, p.97