I covered off both asymmetric and symmetric cryptography, and the pros and cons of each. I then explained hence why both were required to establish a secure session. Finally I explained the role that PFS performed given this background. The interviewer then asked where I typically would see PFS used, and hence I extrapolated the above out into IPSec / two stages of the IKE setup.