nerdexam
EC-Council

312-50V13 · Question #503

Your company, SecureTech Inc., is planning to transmit some sensitive data over an unsecured communication channel. As a cyber security expert, you decide to use symmetric key encryption to protect th

The correct answer is B. Applying the Diffie-Hellman protocol to exchange the symmetric key.. To securely exchange a symmetric key over an unsecured channel for data encryption, the Diffie-Hellman protocol is recommended as it allows two parties to establish a shared secret key without directly transmitting it.

Submitted by suresh_in· Mar 6, 2026Cryptography

Question

Your company, SecureTech Inc., is planning to transmit some sensitive data over an unsecured communication channel. As a cyber security expert, you decide to use symmetric key encryption to protect the data. However, you must also ensure the secure exchange of the symmetric key. Which of the following protocols would you recommend to the team to achieve this?

Options

  • AImplementing SSL certificates on your company's web servers.
  • BApplying the Diffie-Hellman protocol to exchange the symmetric key.
  • CSwitching all data transmission to the HTTPS protocol.
  • DUtilizing SSH for secure remote logins to the servers.

How the community answered

(50 responses)
  • A
    4% (2)
  • B
    72% (36)
  • C
    8% (4)
  • D
    16% (8)

Why each option

To securely exchange a symmetric key over an unsecured channel for data encryption, the Diffie-Hellman protocol is recommended as it allows two parties to establish a shared secret key without directly transmitting it.

AImplementing SSL certificates on your company's web servers.

Implementing SSL certificates primarily provides identity verification and establishes a secure channel via TLS, but the underlying key exchange often leverages protocols like Diffie-Hellman or RSA within TLS.

BApplying the Diffie-Hellman protocol to exchange the symmetric key.Correct

The Diffie-Hellman protocol is specifically designed for securely exchanging cryptographic keys over a public, unsecured communication channel, enabling two parties to agree on a shared secret key that can then be used for symmetric encryption.

CSwitching all data transmission to the HTTPS protocol.

HTTPS is an application-layer protocol for secure web communication using SSL/TLS, but it is not a key exchange protocol itself; rather, it uses key exchange protocols as part of its security mechanism.

DUtilizing SSH for secure remote logins to the servers.

Utilizing SSH is for secure remote logins and command execution, not a general-purpose protocol for symmetric key exchange in the context of data transmission between arbitrary applications.

Concept tested: Symmetric key exchange protocols

Source: https://learn.microsoft.com/en-us/windows/win32/security/diffie-hellman-key-exchange

Topics

#symmetric encryption#key exchange#Diffie-Hellman#cryptographic protocols

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice