An administrator of a secure web server has several clients with top security clearance and prefers security over performance. By default, which of the following cipher suites would provide strong…

The correct answer is A. 3DES-SHA. 3DES (Triple DES) applies the DES algorithm three times to each data block (encrypt-decrypt-encrypt), making it computationally expensive and slow - especially compared to modern stream and block ciphers. Despite its age, 3DES is still considered adequately secure for many use…

Enterprise Security

Question

An administrator of a secure web server has several clients with top security clearance and prefers security over performance. By default, which of the following cipher suites would provide strong security, but at the same time the worst performance?

Options

A3DES-SHA
BDES-MD5
CCamellia-SHA
DRC4-MD5

How the community answered

(25 responses)

A
76% (19)
B
4% (1)
C
8% (2)
D
12% (3)

Explanation

3DES (Triple DES) applies the DES algorithm three times to each data block (encrypt-decrypt-encrypt), making it computationally expensive and slow - especially compared to modern stream and block ciphers. Despite its age, 3DES is still considered adequately secure for many use cases, satisfying the 'strong security' requirement. In contrast: DES-MD5 (Option B) uses single DES which is cryptographically broken; RC4-MD5 (Option D) is fast but RC4 is a broken stream cipher; Camellia-SHA (Option C) is both secure and efficient. For an administrator prioritizing security over performance, 3DES-SHA represents the trade-off of maximum computational work for established cryptographic strength.

Topics

#3DES#cipher suites#encryption performance#TLS

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice