nerdexam
GIAC

GSEC · Question #352

Which of the following statements regarding Secure Sockets Layer (SSL) are true? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. SSL provides message integrity to prevent alteration to the message. B. During SSL session, information is encrypted to prevent unauthorized disclosure. D. SSL can support 128-bit encryption. SSL is a transport-layer security protocol that provides confidentiality through encryption, message integrity via MAC, and supports strong key lengths, but it does not itself process payment transactions.

Defense in Depth and Protocols

Question

Which of the following statements regarding Secure Sockets Layer (SSL) are true? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ASSL provides message integrity to prevent alteration to the message.
  • BDuring SSL session, information is encrypted to prevent unauthorized disclosure.
  • CSSL can process credit cards.
  • DSSL can support 128-bit encryption.

How the community answered

(38 responses)
  • A
    84% (32)
  • C
    16% (6)

Why each option

SSL is a transport-layer security protocol that provides confidentiality through encryption, message integrity via MAC, and supports strong key lengths, but it does not itself process payment transactions.

ASSL provides message integrity to prevent alteration to the message.Correct

SSL appends a Message Authentication Code (MAC) to each record, allowing the recipient to detect any in-transit alteration to the message and confirming data integrity.

BDuring SSL session, information is encrypted to prevent unauthorized disclosure.Correct

SSL encrypts session payloads using symmetric cipher keys negotiated during the handshake, preventing unauthorized parties from reading the transmitted data.

CSSL can process credit cards.

SSL is a transport-layer security protocol that secures the channel over which payment data travels, but it does not have the capability to authorize, route, or process credit card transactions itself - that is the role of payment processors.

DSSL can support 128-bit encryption.Correct

SSL supports cipher suites using 128-bit and higher symmetric encryption such as AES-128, making strong key lengths a well-documented and standard capability of the protocol.

Concept tested: SSL protocol capabilities - encryption, integrity, and key strength

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Topics

#SSL#TLS#encryption#message integrity

Community Discussion

No community discussion yet for this question.

Full GSEC Practice