nerdexam
Cisco

210-250 · Question #200

Which four of the following information is included in sets of cryptographic algorithms that are defined by an SSL/TLS cipher suite? (Choose four.)

The correct answer is A. authentication and key exchange algorithms C. encryption algorithm E. message authentication code algorithm F. the PRF. An SSL/TLS cipher suite is a named combination of four algorithm components that together define how a secure session is negotiated and maintained. Peer IP address and standalone public key metadata are not part of the cipher suite definition itself.

Security Technologies

Question

Which four of the following information is included in sets of cryptographic algorithms that are defined by an SSL/TLS cipher suite? (Choose four.)

Options

  • Aauthentication and key exchange algorithms
  • Bpublic key version and type
  • Cencryption algorithm
  • Dpeer IP address information
  • Emessage authentication code algorithm
  • Fthe PRF

How the community answered

(41 responses)
  • A
    88% (36)
  • B
    7% (3)
  • D
    5% (2)

Why each option

An SSL/TLS cipher suite is a named combination of four algorithm components that together define how a secure session is negotiated and maintained. Peer IP address and standalone public key metadata are not part of the cipher suite definition itself.

Aauthentication and key exchange algorithmsCorrect

The key exchange algorithm (e.g., ECDHE, RSA) and authentication algorithm (e.g., RSA, ECDSA) are core components of every cipher suite, defining how peers establish a shared secret and verify each other's identity.

Bpublic key version and type

Public key version and type are properties of a certificate or key object, not a parameter encoded within a cipher suite specification.

Cencryption algorithmCorrect

The bulk encryption algorithm (e.g., AES-128-GCM, 3DES-CBC) is a mandatory component of a cipher suite, specifying how application data is symmetrically encrypted after the handshake.

Dpeer IP address information

Peer IP address is a network-layer attribute handled by the underlying transport protocol and is never part of a TLS cipher suite definition.

Emessage authentication code algorithmCorrect

The Message Authentication Code (MAC) algorithm (e.g., HMAC-SHA1, HMAC-SHA256) is a required cipher suite component that ensures integrity and authenticity of transmitted records.

Fthe PRFCorrect

The Pseudo-Random Function (PRF) is a cipher suite component used to derive keying material from the master secret, binding the negotiated algorithms to the key generation process.

Concept tested: TLS/SSL cipher suite component identification

Source: https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel

Topics

#TLS cipher suite#encryption algorithms#MAC#PRF

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice