GPEN · Question #314
Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?
The correct answer is C. SSL. SSL (Secure Sockets Layer) is the protocol that combines asymmetric public key cryptography for authentication and key exchange with symmetric encryption for bulk data transfer to secure Internet browsing.
Question
Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?
Options
- AMS-CHAP v2
- BWEP
- CSSL
- DEFS
How the community answered
(25 responses)- A4% (1)
- B8% (2)
- C84% (21)
- D4% (1)
Why each option
SSL (Secure Sockets Layer) is the protocol that combines asymmetric public key cryptography for authentication and key exchange with symmetric encryption for bulk data transfer to secure Internet browsing.
MS-CHAP v2 is a challenge-response authentication protocol used for dial-up and VPN connections; it does not provide general web browsing privacy or use public key encryption for that purpose.
WEP (Wired Equivalent Privacy) is a deprecated wireless LAN encryption standard based on RC4; it is not a protocol for securing Internet browsing sessions.
SSL uses public key (asymmetric) cryptography during the handshake to authenticate the server via digital certificates and to securely negotiate a shared session key. It then switches to faster symmetric encryption for the actual data transfer, providing confidentiality. A message authentication code (MAC) is also applied to each record to ensure integrity, satisfying all three properties named in the question.
EFS (Encrypting File System) is a Windows OS feature for encrypting files stored on disk using the NTFS file system; it operates at the file level and is not a network communication protocol.
Concept tested: SSL hybrid encryption for secure web communication
Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview
Topics
Community Discussion
No community discussion yet for this question.