312-50V13 · Question #503
Your company, SecureTech Inc., is planning to transmit some sensitive data over an unsecured communication channel. As a cyber security expert, you decide to use symmetric key encryption to protect th
The correct answer is B. Applying the Diffie-Hellman protocol to exchange the symmetric key.. To securely exchange a symmetric key over an unsecured channel for data encryption, the Diffie-Hellman protocol is recommended as it allows two parties to establish a shared secret key without directly transmitting it.
Question
Options
- AImplementing SSL certificates on your company's web servers.
- BApplying the Diffie-Hellman protocol to exchange the symmetric key.
- CSwitching all data transmission to the HTTPS protocol.
- DUtilizing SSH for secure remote logins to the servers.
How the community answered
(50 responses)- A4% (2)
- B72% (36)
- C8% (4)
- D16% (8)
Why each option
To securely exchange a symmetric key over an unsecured channel for data encryption, the Diffie-Hellman protocol is recommended as it allows two parties to establish a shared secret key without directly transmitting it.
Implementing SSL certificates primarily provides identity verification and establishes a secure channel via TLS, but the underlying key exchange often leverages protocols like Diffie-Hellman or RSA within TLS.
The Diffie-Hellman protocol is specifically designed for securely exchanging cryptographic keys over a public, unsecured communication channel, enabling two parties to agree on a shared secret key that can then be used for symmetric encryption.
HTTPS is an application-layer protocol for secure web communication using SSL/TLS, but it is not a key exchange protocol itself; rather, it uses key exchange protocols as part of its security mechanism.
Utilizing SSH is for secure remote logins and command execution, not a general-purpose protocol for symmetric key exchange in the context of data transmission between arbitrary applications.
Concept tested: Symmetric key exchange protocols
Source: https://learn.microsoft.com/en-us/windows/win32/security/diffie-hellman-key-exchange
Topics
Community Discussion
No community discussion yet for this question.