nerdexam
GIAC

GSLC · Question #223

You are the Network Administrator for a company that frequently exchanges confidential emails without outside parties (clients, vendors, etc.). You want those emails to be encrypted; however, you want

The correct answer is C. Asymmetric Encryption. Asymmetric encryption is preferred for email encryption because it eliminates the need to securely pre-share a secret key, making the encryption process significantly easier to deploy.

Security Architecture & Engineering

Question

You are the Network Administrator for a company that frequently exchanges confidential emails without outside parties (clients, vendors, etc.). You want those emails to be encrypted; however, you want the least difficulty in the encryption process. Which of the following should you choose?

Options

  • ADES
  • BMD5
  • CAsymmetric Encryption
  • DSymmetric Encryption

How the community answered

(65 responses)
  • A
    8% (5)
  • B
    3% (2)
  • C
    88% (57)
  • D
    2% (1)

Why each option

Asymmetric encryption is preferred for email encryption because it eliminates the need to securely pre-share a secret key, making the encryption process significantly easier to deploy.

ADES

DES is a symmetric algorithm requiring both parties to first securely exchange an identical secret key, introducing key distribution complexity before any encrypted email can be sent.

BMD5

MD5 is a one-way cryptographic hash function used for integrity checking, not for encrypting or decrypting message content.

CAsymmetric EncryptionCorrect

Asymmetric encryption uses a public-private key pair where the sender encrypts a message using the recipient's freely distributed public key, removing the need for a secure out-of-band key exchange before communication begins. This is the foundation of email encryption standards like S/MIME and PGP, and it is precisely this property - no secret key distribution problem - that makes it the lowest-friction approach. The recipient then decrypts with their private key, which never needs to be shared.

DSymmetric Encryption

Symmetric encryption requires a shared secret key to be securely distributed to every communication partner in advance, which is operationally difficult especially when communicating with external parties.

Concept tested: Asymmetric encryption for email confidentiality

Source: https://learn.microsoft.com/en-us/exchange/security-and-compliance/smime-exo/smime-exo

Topics

#email encryption#symmetric encryption#asymmetric encryption#confidentiality

Community Discussion

No community discussion yet for this question.

Full GSLC Practice