Free Cisco CLCEI 300-820 Actual Exam Questions - Question 13 Discussion

B, 4096 is overkill for most Cisco Expressway deployments, Cisco usually sticks with 2048.

Option B, because 2048 bits balance security and performance well for most Cisco setups.

B/D? 2048 makes sense for solid security without slowing things down, but I wonder if Cisco might push for 8192 in high-security environments. Still, that seems excessive for typical Expressway use. 1024 is definitely too short nowadays, and 4096 might be more than needed unless you want extra future-proofing. Overall, 2048 is probably the sweet spot Cisco recommends for general cases.

I’m going with B here too. 1024 is too weak these days, and 4096 or 8192 would cause unnecessary processing overhead. Cisco generally recommends 2048 bits for most certificates unless there's a specific security need to go higher, so B fits best.

Maybe B again, since 1024 is definitely outdated and 8192 seems way overkill for Expressway. Cisco usually sticks with 2048 to keep the balance right.

I’m thinking it can’t be 1024 (A) since that’s considered weak now. Between 2048 and 4096, 2048 seems more practical for performance reasons, but does Cisco explicitly recommend 2048 or just accept it as a minimum?

B/C? I get why 2048 (B) is popular since it’s the standard minimum for most certs, but Cisco sometimes pushes for stronger keys like 4096 (C) on Expressway to future-proof security. Still, 8192 (D) feels excessive and 1024 (A) is definitely outdated. If the question’s about recommended key length, not minimum, then C might fit better for strong security without going overboard. But if they want the baseline standard, B makes sense too.

B. 2048 bits is still the sweet spot for Cisco certificates. It balances strong security with performance and compatibility. Using 4096 or 8192 might be overkill and cause issues with some devices or slower handshakes. 1024 is definitely outdated and not recommended anymore. So B makes the most sense here.

Maybe B since 2048 is pretty standard nowadays for secure keys, but has Cisco officially confirmed this?