nerdexam
Cisco

210-250 · Question #189

Which one of the following is the first exchange during SSHv1 authentication negotiation?

The correct answer is B. The server sends a public key to the client. SSHv1 begins its authentication negotiation with the server immediately transmitting its public host key to the client upon connection establishment.

Security Technologies

Question

Which one of the following is the first exchange during SSHv1 authentication negotiation?

Options

  • AThe server requests a username and password from the user.
  • BThe server sends a public key to the client.
  • CThe client generates a session key.
  • DThe client and server agree upon the encryption algorithm.

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    86% (25)
  • C
    7% (2)
  • D
    3% (1)

Why each option

SSHv1 begins its authentication negotiation with the server immediately transmitting its public host key to the client upon connection establishment.

AThe server requests a username and password from the user.

The server does not request credentials as the first step - username and password exchange occurs only after the key exchange phase has already completed.

BThe server sends a public key to the client.Correct

In SSHv1, as soon as the TCP connection is established, the server sends its public host key and server key to the client as the very first protocol message. The client uses this public key to encrypt the randomly generated session key it creates in the next step. This server-key-first sequence is a defining characteristic of the SSHv1 handshake flow.

CThe client generates a session key.

The client generates a session key only after it has received the server's public key, making session key generation the second step rather than the first.

DThe client and server agree upon the encryption algorithm.

Explicit algorithm negotiation is a feature of SSHv2 - in SSHv1 the server's public key transmission precedes any separate negotiation of encryption algorithms.

Concept tested: SSHv1 authentication handshake initial exchange sequence

Source: https://www.rfc-editor.org/rfc/rfc4251

Topics

#SSHv1#authentication negotiation#public key#protocol handshake

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice