312-50V12 · Question #257
Your company, SecureTech Inc., is planning to transmit some sensitive data over an unsecured communication channel. As a cyber security expert, you decide to use symmetric key encryption to protect th
The correct answer is D. Applying the Diffie-Hellman protocol to exchange the symmetric key.. To securely transmit sensitive data using symmetric key encryption over an unsecured channel, a method is needed to exchange the symmetric key itself securely. The Diffie-Hellman protocol is specifically designed for this purpose.
Question
Options
- ASwitching all data transmission to the HTTPS protocol.
- BImplementing SSL certificates on your company's web servers.
- CUtilizing SSH for secure remote logins to the servers.
- DApplying the Diffie-Hellman protocol to exchange the symmetric key.
How the community answered
(35 responses)- A6% (2)
- C3% (1)
- D91% (32)
Why each option
To securely transmit sensitive data using symmetric key encryption over an unsecured channel, a method is needed to exchange the symmetric key itself securely. The Diffie-Hellman protocol is specifically designed for this purpose.
Switching all data transmission to the HTTPS protocol is a higher-level solution that uses TLS/SSL to secure communication, but it is not the specific protocol for exchanging the symmetric key itself, rather HTTPS leverages such protocols.
Implementing SSL certificates primarily provides server authentication and enables TLS encryption, but the certificates themselves are not the protocol for the secure exchange of the symmetric key.
Utilizing SSH is for secure remote shell access and file transfer, and while it uses strong encryption and key exchange mechanisms, it is an application protocol, not the underlying protocol for securely exchanging a symmetric key for general data transmission.
The Diffie-Hellman protocol is a cryptographic protocol that allows two parties to establish a shared secret key over an insecure communication channel without any prior shared secret. This shared secret can then be used as the symmetric key for encrypting and decrypting the sensitive data, fulfilling the requirement for secure key exchange.
Concept tested: Symmetric key exchange protocol selection
Source: https://learn.microsoft.com/en-us/windows/win32/secauthn/key-exchange-algorithms
Topics
Community Discussion
No community discussion yet for this question.