210-250 · Question #200
Which four of the following information is included in sets of cryptographic algorithms that are defined by an SSL/TLS cipher suite? (Choose four.)
The correct answer is A. authentication and key exchange algorithms C. encryption algorithm E. message authentication code algorithm F. the PRF. An SSL/TLS cipher suite is a named combination of four algorithm components that together define how a secure session is negotiated and maintained. Peer IP address and standalone public key metadata are not part of the cipher suite definition itself.
Question
Which four of the following information is included in sets of cryptographic algorithms that are defined by an SSL/TLS cipher suite? (Choose four.)
Options
- Aauthentication and key exchange algorithms
- Bpublic key version and type
- Cencryption algorithm
- Dpeer IP address information
- Emessage authentication code algorithm
- Fthe PRF
How the community answered
(41 responses)- A88% (36)
- B7% (3)
- D5% (2)
Why each option
An SSL/TLS cipher suite is a named combination of four algorithm components that together define how a secure session is negotiated and maintained. Peer IP address and standalone public key metadata are not part of the cipher suite definition itself.
The key exchange algorithm (e.g., ECDHE, RSA) and authentication algorithm (e.g., RSA, ECDSA) are core components of every cipher suite, defining how peers establish a shared secret and verify each other's identity.
Public key version and type are properties of a certificate or key object, not a parameter encoded within a cipher suite specification.
The bulk encryption algorithm (e.g., AES-128-GCM, 3DES-CBC) is a mandatory component of a cipher suite, specifying how application data is symmetrically encrypted after the handshake.
Peer IP address is a network-layer attribute handled by the underlying transport protocol and is never part of a TLS cipher suite definition.
The Message Authentication Code (MAC) algorithm (e.g., HMAC-SHA1, HMAC-SHA256) is a required cipher suite component that ensures integrity and authenticity of transmitted records.
The Pseudo-Random Function (PRF) is a cipher suite component used to derive keying material from the master secret, binding the negotiated algorithms to the key generation process.
Concept tested: TLS/SSL cipher suite component identification
Source: https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel
Topics
Community Discussion
No community discussion yet for this question.