nerdexam
CompTIA

CV0-003 · Question #170

Which of the following technologies allows for the secure exchange of encryption keys within an internal network?

The correct answer is C. Diffie-Hellman. Diffie-Hellman is a cryptographic key exchange protocol that allows two parties to securely establish a shared secret over an untrusted network without transmitting the key itself.

Security

Question

Which of the following technologies allows for the secure exchange of encryption keys within an internal network?

Options

  • AAES
  • BRC4
  • CDiffie-Hellman
  • D3DES

How the community answered

(62 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    94% (58)
  • D
    3% (2)

Why each option

Diffie-Hellman is a cryptographic key exchange protocol that allows two parties to securely establish a shared secret over an untrusted network without transmitting the key itself.

AAES

AES (Advanced Encryption Standard) is a symmetric block cipher used to encrypt data in transit or at rest, not a mechanism for exchanging or establishing encryption keys between parties.

BRC4

RC4 is a stream cipher used for encrypting data and does not provide any key exchange or key agreement functionality.

CDiffie-HellmanCorrect

Diffie-Hellman enables two parties to derive an identical shared secret key over an insecure channel using the mathematical properties of modular exponentiation, without ever sending the key across the network. Even if the exchange is intercepted, the shared secret cannot be computed by an attacker without solving the discrete logarithm problem. It is widely used in protocols such as TLS and IPsec to establish session keys before symmetric encryption begins.

D3DES

3DES (Triple Data Encryption Standard) is a symmetric block cipher that applies DES encryption three times to each data block and does not provide a mechanism for securely exchanging keys.

Concept tested: Diffie-Hellman key exchange protocol

Source: https://csrc.nist.gov/publications/detail/sp/800-56a/rev3/final

Topics

#Diffie-Hellman#key exchange#encryption#PKI

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice