nerdexam
Cisco

210-250 · Question #188

Which statement about the Diffie-Hellman Key Agreement is true?

The correct answer is B. The higher the Diffie-Hellman group number indicates a larger key size. In Diffie-Hellman key exchange, group numbers map to specific key lengths, with higher group numbers using larger keys that require more computational effort but provide stronger security.

Security Technologies

Question

Which statement about the Diffie-Hellman Key Agreement is true?

Options

  • AThe higher the Diffie-Hellman group number indicates a smaller key size.
  • BThe higher the Diffie-Hellman group number indicates a larger key size.
  • CThe higher the Diffie-Hellman group number indicates no difference in processing requirements.
  • DThe higher the Diffie-Hellman group number indicates a smaller prime number (p).

How the community answered

(21 responses)
  • A
    10% (2)
  • B
    86% (18)
  • C
    5% (1)

Why each option

In Diffie-Hellman key exchange, group numbers map to specific key lengths, with higher group numbers using larger keys that require more computational effort but provide stronger security.

AThe higher the Diffie-Hellman group number indicates a smaller key size.

Higher DH group numbers indicate larger, not smaller, key sizes - each step up in group number increases the bit length of the underlying key material.

BThe higher the Diffie-Hellman group number indicates a larger key size.Correct

Higher Diffie-Hellman group numbers correspond to larger key sizes and larger prime numbers (p). For example, DH Group 1 uses 768-bit keys, Group 2 uses 1024-bit keys, Group 5 uses 1536-bit keys, and Group 14 uses 2048-bit keys. This increase in key size strengthens security but also increases processing overhead on both endpoints.

CThe higher the Diffie-Hellman group number indicates no difference in processing requirements.

Higher group numbers do require greater processing because the mathematical operations involve larger prime numbers and longer key lengths, making this statement false.

DThe higher the Diffie-Hellman group number indicates a smaller prime number (p).

Higher group numbers use larger prime numbers (p), not smaller ones - the increased prime size is precisely what drives both the improved security and the added computational cost.

Concept tested: Diffie-Hellman group numbers and key size relationships

Source: https://www.cisco.com/c/en/us/about/security-center/next-generation-cryptography.html

Topics

#Diffie-Hellman groups#key size#key exchange#cryptographic strength

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice