nerdexam
GIAC

GSLC · Question #204

Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?

The correct answer is A. SSL. SSL (Secure Sockets Layer) uses asymmetric public key cryptography for key exchange and authentication, then switches to symmetric encryption for bulk data transfer, providing privacy, authentication, and integrity.

Security Architecture & Engineering

Question

Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?

Options

  • ASSL
  • BMS-CHAP v2
  • CEFS
  • DWEP

How the community answered

(39 responses)
  • A
    92% (36)
  • B
    5% (2)
  • D
    3% (1)

Why each option

SSL (Secure Sockets Layer) uses asymmetric public key cryptography for key exchange and authentication, then switches to symmetric encryption for bulk data transfer, providing privacy, authentication, and integrity.

ASSLCorrect

SSL combines asymmetric (public key) cryptography to authenticate the server and securely exchange a session key, then uses that symmetric session key for efficient encrypted communication - precisely matching the description of combining both encryption types for privacy, authentication, and message integrity in secure web browsing (HTTPS).

BMS-CHAP v2

MS-CHAP v2 is a Microsoft challenge-response authentication protocol used in VPN and dial-up scenarios; it does not provide general browsing encryption using a public/symmetric hybrid model.

CEFS

EFS (Encrypting File System) is a Windows feature for encrypting files on disk; it is not a network communication protocol and does not facilitate secure Internet browsing.

DWEP

WEP (Wired Equivalent Privacy) is a deprecated wireless network encryption protocol for Wi-Fi; it does not provide browser-level communication privacy or use a public key and symmetric hybrid approach.

Concept tested: SSL hybrid encryption for secure web communication

Source: https://www.rfc-editor.org/rfc/rfc6101

Topics

#SSL#public key encryption#symmetric encryption#secure browsing

Community Discussion

No community discussion yet for this question.

Full GSLC Practice