You are the chief security officer at AlphaTech, a tech company that specializes in data storage solutions. Your company is developing a new cloud storage platform where users can store their…

Question

Options

• AUse hash functions to distribute the keys.
• Bimplement the Diffie-Hellman protocol for secure key exchange.
• CUse HTTPS protocol for secure key transfer.
• DUse digital signatures to encrypt the symmetric keys.

• A
  6% (4)
• B
  78% (50)
• C
  13% (8)
• D
  3% (2)

Explanation

Diffie-Hellman (Option B) is the recommended strategy because it allows two parties to securely establish a shared symmetric key over an insecure channel without ever transmitting the key itself - making it ideal for distributing encryption keys to users without risk of interception.

Why the distractors are wrong:

• A (Hash functions): Hash functions are one-way algorithms used for data integrity verification, not for key distribution or encryption - they cannot be "reversed" to recover a key.
• C (HTTPS): While HTTPS secures data in transit, it is a transport-layer protocol and not a key management/distribution mechanism; it actually uses key exchange protocols like Diffie-Hellman underneath, making it the symptom, not the solution.
• D (Digital signatures): Digital signatures verify authenticity and integrity of data - they do not encrypt symmetric keys for distribution; that role belongs to asymmetric encryption (e.g., RSA), not signatures.

Memory Tip: Think of Diffie-Hellman as two people mixing paint colors in public - each person adds their secret color privately, and the final mixture (shared key) can never be reverse-engineered by an eavesdropper. When you see "secure key exchange," think D-H = Don't Hand over the key directly!

No community discussion yet for this question.