nerdexam
GIAC

GPEN · Question #314

Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?

The correct answer is C. SSL. SSL (Secure Sockets Layer) is the protocol that combines asymmetric public key cryptography for authentication and key exchange with symmetric encryption for bulk data transfer to secure Internet browsing.

Penetration Testing Foundations & Reconnaissance

Question

Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?

Options

  • AMS-CHAP v2
  • BWEP
  • CSSL
  • DEFS

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    84% (21)
  • D
    4% (1)

Why each option

SSL (Secure Sockets Layer) is the protocol that combines asymmetric public key cryptography for authentication and key exchange with symmetric encryption for bulk data transfer to secure Internet browsing.

AMS-CHAP v2

MS-CHAP v2 is a challenge-response authentication protocol used for dial-up and VPN connections; it does not provide general web browsing privacy or use public key encryption for that purpose.

BWEP

WEP (Wired Equivalent Privacy) is a deprecated wireless LAN encryption standard based on RC4; it is not a protocol for securing Internet browsing sessions.

CSSLCorrect

SSL uses public key (asymmetric) cryptography during the handshake to authenticate the server via digital certificates and to securely negotiate a shared session key. It then switches to faster symmetric encryption for the actual data transfer, providing confidentiality. A message authentication code (MAC) is also applied to each record to ensure integrity, satisfying all three properties named in the question.

DEFS

EFS (Encrypting File System) is a Windows OS feature for encrypting files stored on disk using the NTFS file system; it operates at the file level and is not a network communication protocol.

Concept tested: SSL hybrid encryption for secure web communication

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Topics

#SSL/TLS#public key encryption#symmetric encryption#secure communication

Community Discussion

No community discussion yet for this question.

Full GPEN Practice