nerdexam
(ISC)2

CISSP · Question #550

Asymmetric algorithms are used for which of the following when using Secure Sockets Layer/Transport Layer Security (SSL/TLS) for implementing network security?

The correct answer is A. Peer authentication. In SSL/TLS, asymmetric (public-key) cryptography is used during the handshake phase primarily for peer authentication and key exchange, while symmetric algorithms handle bulk data encryption.

Submitted by lars.no· Mar 5, 2026Communication and Network Security

Question

Asymmetric algorithms are used for which of the following when using Secure Sockets Layer/Transport Layer Security (SSL/TLS) for implementing network security?

Options

  • APeer authentication
  • BPayload data encryption
  • CSession encryption
  • DHashing digest

How the community answered

(20 responses)
  • A
    90% (18)
  • B
    5% (1)
  • D
    5% (1)

Why each option

In SSL/TLS, asymmetric (public-key) cryptography is used during the handshake phase primarily for peer authentication and key exchange, while symmetric algorithms handle bulk data encryption.

APeer authenticationCorrect

Asymmetric algorithms such as RSA or ECDSA are used during the SSL/TLS handshake to authenticate peers via digital certificates, where the server (and optionally the client) proves its identity using a public/private key pair. The asymmetric operation is computationally expensive and therefore limited to the handshake phase for authentication and session key negotiation, not for ongoing data transfer. Once authentication is complete, a symmetric session key is derived and used for the remainder of the communication.

BPayload data encryption

Payload data encryption in SSL/TLS is performed by symmetric algorithms (e.g., AES), not asymmetric ones, because symmetric ciphers are far more efficient for encrypting large volumes of data.

CSession encryption

Session encryption uses symmetric algorithms such as AES negotiated during the handshake; asymmetric algorithms are too slow and resource-intensive to encrypt an entire session's traffic.

DHashing digest

Hashing digests in SSL/TLS are produced by cryptographic hash functions such as SHA-256, which are neither asymmetric nor symmetric algorithms but belong to a separate category of one-way hash functions.

Concept tested: SSL/TLS asymmetric cryptography role in authentication

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Topics

#TLS handshake#asymmetric encryption#authentication#digital certificates

Community Discussion

No community discussion yet for this question.

Full CISSP Practice