EC-Council
312-50V9 · Question #273
312-50V9 Question #273: Real Exam Question with Answer & Explanation
The correct answer is C: Secure Sockets Layer (SSL) use the asymmetric encryption both (public/private key pair) to. SSL/TLS uses asymmetric encryption with a public/private key pair during the handshake to authenticate the server and securely establish session keys for encrypted communication.
Question
Cryptography is the practice and study of techniques for secure communication in the presence of third parties (called adversaries.) More generally, it is about constructing and analyzing protocols that overcome the influence of adversaries and that are related to various aspects in information security such as data confidentiality, data integrity, authentication, and non- repudiation. Modern cryptography intersects the disciplines of mathematics, computer science, and electrical engineering. Applications of cryptography include ATM cards, computer passwords, and electronic commerce. Basic example to understand how cryptography works is given below: SECURE (plain text) +1(+1 next letter, for example, the letter ""T"" is used for ""S"" to encrypt.) TFDVSF (encrypted text) +=logic=> Algorithm 1=Factor=> Key Which of the following choices is true about cryptography?
Options
- AAlgorithm is not the secret, key is the secret.
- BSymmetric-key algorithms are a class of algorithms for cryptography that use the different
- CSecure Sockets Layer (SSL) use the asymmetric encryption both (public/private key pair) to
- DPublic-key cryptography, also known as asymmetric cryptography, public key is for decrypt,
Explanation
SSL/TLS uses asymmetric encryption with a public/private key pair during the handshake to authenticate the server and securely establish session keys for encrypted communication.
Common mistakes.
- A. While Kerckhoffs's principle correctly states that the key - not the algorithm - should be secret, this choice is stated incompletely and does not accurately describe any specific cryptographic protocol, making it a weaker and less precise answer than C.
- B. Symmetric-key algorithms use the same single shared key for both encryption and decryption - using two different keys (public and private) is the defining property of asymmetric cryptography, not symmetric.
- D. In public-key (asymmetric) cryptography the public key is used to encrypt data and the private key is used to decrypt it; this choice reverses those roles, which is technically incorrect.
Concept tested. SSL asymmetric encryption and public/private key pair usage
Reference. https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview
Community Discussion
No community discussion yet for this question.