nerdexam
GIAC

GSEC · Question #396

Which of the following are the ways of sending secure e-mail messages over the Internet? Each correct answer represents a complete solution. Choose two.

The correct answer is A. S/MIME C. PGP. S/MIME and PGP are the two established standards for end-to-end encryption and digital signing of email messages in transit over the Internet.

Linux and Cryptography

Question

Which of the following are the ways of sending secure e-mail messages over the Internet? Each correct answer represents a complete solution. Choose two.

Options

  • AS/MIME
  • BTLS
  • CPGP
  • DIPSec

How the community answered

(21 responses)
  • A
    81% (17)
  • B
    10% (2)
  • D
    10% (2)

Why each option

S/MIME and PGP are the two established standards for end-to-end encryption and digital signing of email messages in transit over the Internet.

AS/MIMECorrect

S/MIME (Secure/Multipurpose Internet Mail Extensions) uses public-key infrastructure (PKI) certificates to encrypt and digitally sign email content, providing end-to-end security and is natively supported in most enterprise email clients.

BTLS

TLS secures the transport channel between mail servers (e.g., SMTP over TLS), but it does not provide end-to-end message encryption - the email content is decrypted at each mail server hop, so it is not a complete solution for securing the message itself.

CPGPCorrect

PGP (Pretty Good Privacy) uses a web-of-trust model with public/private key pairs to encrypt and sign email messages end-to-end, and its open standard OpenPGP (RFC 4880) is widely used for secure personal and organizational email communication.

DIPSec

IPSec operates at the network layer (Layer 3) to secure IP traffic between hosts or networks, and while it can protect the network path, it does not provide email-specific end-to-end message encryption or digital signing.

Concept tested: End-to-end secure email encryption standards

Source: https://learn.microsoft.com/en-us/exchange/security-and-compliance/smime-exo/smime-exo

Topics

#S/MIME#PGP#email encryption#secure messaging

Community Discussion

No community discussion yet for this question.

Full GSEC Practice