nerdexam
Cisco

350-701 · Question #665

Which two algorithms must be used when an engineer is creating a connection that will have classified data across it? (Choose two.)

The correct answer is C. AES-256 E. SHA-384. For securing a connection carrying classified data, strong cryptographic algorithms are required for both encryption and hashing, specifically AES-256 for symmetric encryption and SHA-384 for hashing.

Submitted by amina.ke· Mar 30, 2026Security Concepts

Question

Which two algorithms must be used when an engineer is creating a connection that will have classified data across it? (Choose two.)

Options

  • ARSA-3072
  • BECDSA-256
  • CAES-256
  • DRC4
  • ESHA-384

How the community answered

(42 responses)
  • A
    5% (2)
  • B
    2% (1)
  • C
    93% (39)

Why each option

For securing a connection carrying classified data, strong cryptographic algorithms are required for both encryption and hashing, specifically AES-256 for symmetric encryption and SHA-384 for hashing.

ARSA-3072

RSA-3072 is an asymmetric encryption algorithm primarily used for key exchange or digital signatures, not typically for bulk data encryption of a connection.

BECDSA-256

ECDSA-256 (Elliptic Curve Digital Signature Algorithm with a 256-bit key) is used for digital signatures, providing authentication and integrity, but not directly for encrypting the data stream itself.

CAES-256Correct

AES-256 (Advanced Encryption Standard with a 256-bit key) is a robust symmetric encryption algorithm widely regarded as secure enough for classified data due to its strong key length and resistance to known attacks, providing confidentiality.

DRC4

RC4 is a stream cipher that is considered insecure and has known vulnerabilities, making it unsuitable for protecting classified data.

ESHA-384Correct

SHA-384 (Secure Hash Algorithm with a 384-bit output) is a cryptographic hash function that provides data integrity and authentication by generating a fixed-size digest of the data, which is crucial for classified data to detect any tampering.

Concept tested: Strong cryptographic algorithms for classified data (encryption, hashing)

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike/configuration/xe-16/sec-conn-ike-xe-16-book/config-ikev2-proposal.html

Topics

#AES-256#SHA-384#encryption algorithms#classified data

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice