nerdexam
GIAC

GSLC · Question #265

Andrew works as a Network Administrator for Infonet Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to increase the security of the Web site by…

The correct answer is C. Asymmetric D. Symmetric. SSL uses both asymmetric encryption for the key exchange handshake and symmetric encryption for bulk data transfer during the session.

Security Architecture & Engineering

Question

Andrew works as a Network Administrator for Infonet Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to increase the security of the Web site by implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use? Each correct answer represents a complete solution. Choose two.

Options

  • ASecret
  • BSynchronous
  • CAsymmetric
  • DSymmetric

How the community answered

(37 responses)
  • A
    8% (3)
  • B
    3% (1)
  • C
    89% (33)

Why each option

SSL uses both asymmetric encryption for the key exchange handshake and symmetric encryption for bulk data transfer during the session.

ASecret

'Secret' is not a recognized category of encryption algorithm used in SSL or any standard cryptographic framework.

BSynchronous

'Synchronous' describes a communication timing model, not a type of encryption, and plays no role in the SSL protocol.

CAsymmetricCorrect

Asymmetric encryption (public/private key pairs, e.g., RSA) is used during the SSL/TLS handshake to authenticate the server and securely exchange session keys, ensuring that only the intended party can decrypt the key material.

DSymmetricCorrect

Symmetric encryption (e.g., AES) is used after the handshake to encrypt the actual session data, because it is far more computationally efficient than asymmetric encryption for bulk data transfer.

Concept tested: SSL/TLS hybrid encryption model

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Topics

#SSL#symmetric encryption#asymmetric encryption#PKI

Community Discussion

No community discussion yet for this question.

Full GSLC Practice