nerdexam
EC-Council

312-50V12 · Question #289

Sam, a web developer, was instructed to incorporate a hybrid encryption software program into a web application to secure email messages. Sam used an encryption software, which is a free…

The correct answer is C. GPG. The question describes an encryption software that is a free, hybrid implementation of the OpenPGP standard for email security, which precisely matches the characteristics of GPG.

Submitted by naveen.iyer· Mar 4, 2026Cryptography

Question

Sam, a web developer, was instructed to incorporate a hybrid encryption software program into a web application to secure email messages. Sam used an encryption software, which is a free implementation of the OpenPGP standard that uses both symmetric-key cryptography and asymmetric-key cryptography for improved speed and secure key exchange. What is the encryption software employed by Sam for securing the email messages?

Options

  • APGP
  • BSMTP
  • CGPG
  • DS/MIME

How the community answered

(21 responses)
  • B
    5% (1)
  • C
    90% (19)
  • D
    5% (1)

Why each option

The question describes an encryption software that is a free, hybrid implementation of the OpenPGP standard for email security, which precisely matches the characteristics of GPG.

APGP

PGP (Pretty Good Privacy) is the original proprietary software and standard that OpenPGP is based upon, not specifically a 'free implementation' of the OpenPGP standard itself.

BSMTP

SMTP (Simple Mail Transfer Protocol) is a network protocol used for sending email, not an encryption software program.

CGPGCorrect

GPG (GNU Privacy Guard) is the free and open-source software implementation of the OpenPGP standard, which defines a format for encrypted messages and digital signatures. It employs a hybrid encryption scheme where a message is encrypted with a unique symmetric key, which is then encrypted using the recipient's public asymmetric key, ensuring both efficient data encryption and secure key distribution for email communications.

DS/MIME

S/MIME is a distinct standard for email encryption and digital signatures, separate from and not an implementation of the OpenPGP standard.

Concept tested: Email encryption standards and implementations (OpenPGP, GPG)

Source: https://www.gnupg.org/gph/en/manual.html

Topics

#GPG#OpenPGP#hybrid encryption#email security

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice