GSEC · Question #352
Which of the following statements regarding Secure Sockets Layer (SSL) are true? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. SSL provides message integrity to prevent alteration to the message. B. During SSL session, information is encrypted to prevent unauthorized disclosure. D. SSL can support 128-bit encryption. SSL is a transport-layer security protocol that provides confidentiality through encryption, message integrity via MAC, and supports strong key lengths, but it does not itself process payment transactions.
Question
Which of the following statements regarding Secure Sockets Layer (SSL) are true? Each correct answer represents a complete solution. Choose all that apply.
Options
- ASSL provides message integrity to prevent alteration to the message.
- BDuring SSL session, information is encrypted to prevent unauthorized disclosure.
- CSSL can process credit cards.
- DSSL can support 128-bit encryption.
How the community answered
(38 responses)- A84% (32)
- C16% (6)
Why each option
SSL is a transport-layer security protocol that provides confidentiality through encryption, message integrity via MAC, and supports strong key lengths, but it does not itself process payment transactions.
SSL appends a Message Authentication Code (MAC) to each record, allowing the recipient to detect any in-transit alteration to the message and confirming data integrity.
SSL encrypts session payloads using symmetric cipher keys negotiated during the handshake, preventing unauthorized parties from reading the transmitted data.
SSL is a transport-layer security protocol that secures the channel over which payment data travels, but it does not have the capability to authorize, route, or process credit card transactions itself - that is the role of payment processors.
SSL supports cipher suites using 128-bit and higher symmetric encryption such as AES-128, making strong key lengths a well-documented and standard capability of the protocol.
Concept tested: SSL protocol capabilities - encryption, integrity, and key strength
Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview
Topics
Community Discussion
No community discussion yet for this question.