nerdexam
GIAC

GSEC · Question #193

Which of the following statements about Secure Sockets Layer (SSL) are true? Each correct answer represents a complete solution. Choose two.

The correct answer is A. It provides communication privacy, authentication, and message integrity. C. It uses a combination of public key and symmetric encryption for security of data. SSL secures data in transit using a hybrid encryption model and provides authentication and integrity guarantees. It is a protocol-level security layer, not a service for mail transfer or exclusively for browser-server connectivity.

Defense in Depth and Protocols

Question

Which of the following statements about Secure Sockets Layer (SSL) are true? Each correct answer represents a complete solution. Choose two.

Options

  • AIt provides communication privacy, authentication, and message integrity.
  • BIt provides mail transfer service.
  • CIt uses a combination of public key and symmetric encryption for security of data.
  • DIt provides connectivity between Web browser and Web server.

How the community answered

(20 responses)
  • A
    75% (15)
  • B
    10% (2)
  • D
    15% (3)

Why each option

SSL secures data in transit using a hybrid encryption model and provides authentication and integrity guarantees. It is a protocol-level security layer, not a service for mail transfer or exclusively for browser-server connectivity.

AIt provides communication privacy, authentication, and message integrity.Correct

SSL provides confidentiality via encryption, authentication via digital certificates exchanged during the handshake, and message integrity via MAC (Message Authentication Code), making all three properties core to the SSL protocol design.

BIt provides mail transfer service.

Mail transfer is handled by SMTP (Simple Mail Transfer Protocol), not SSL; SSL is a security layer that can wrap other protocols but is not itself a mail service.

CIt uses a combination of public key and symmetric encryption for security of data.Correct

SSL uses asymmetric (public key) cryptography during the handshake phase to authenticate parties and securely exchange a session key, then switches to faster symmetric encryption for the bulk data transfer - combining both methods for security and performance.

DIt provides connectivity between Web browser and Web server.

SSL is not limited to web browser-to-web server connectivity; it is a general-purpose security protocol used to secure FTP, SMTP, LDAP, and many other communication channels.

Concept tested: SSL hybrid encryption and security properties

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Topics

#SSL#public key encryption#symmetric encryption#data integrity

Community Discussion

No community discussion yet for this question.

Full GSEC Practice