350-701 · Question #665
Which two algorithms must be used when an engineer is creating a connection that will have classified data across it? (Choose two.)
The correct answer is C. AES-256 E. SHA-384. For securing a connection carrying classified data, strong cryptographic algorithms are required for both encryption and hashing, specifically AES-256 for symmetric encryption and SHA-384 for hashing.
Question
Which two algorithms must be used when an engineer is creating a connection that will have classified data across it? (Choose two.)
Options
- ARSA-3072
- BECDSA-256
- CAES-256
- DRC4
- ESHA-384
How the community answered
(42 responses)- A5% (2)
- B2% (1)
- C93% (39)
Why each option
For securing a connection carrying classified data, strong cryptographic algorithms are required for both encryption and hashing, specifically AES-256 for symmetric encryption and SHA-384 for hashing.
RSA-3072 is an asymmetric encryption algorithm primarily used for key exchange or digital signatures, not typically for bulk data encryption of a connection.
ECDSA-256 (Elliptic Curve Digital Signature Algorithm with a 256-bit key) is used for digital signatures, providing authentication and integrity, but not directly for encrypting the data stream itself.
AES-256 (Advanced Encryption Standard with a 256-bit key) is a robust symmetric encryption algorithm widely regarded as secure enough for classified data due to its strong key length and resistance to known attacks, providing confidentiality.
RC4 is a stream cipher that is considered insecure and has known vulnerabilities, making it unsuitable for protecting classified data.
SHA-384 (Secure Hash Algorithm with a 384-bit output) is a cryptographic hash function that provides data integrity and authentication by generating a fixed-size digest of the data, which is crucial for classified data to detect any tampering.
Concept tested: Strong cryptographic algorithms for classified data (encryption, hashing)
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike/configuration/xe-16/sec-conn-ike-xe-16-book/config-ikev2-proposal.html
Topics
Community Discussion
No community discussion yet for this question.