GSLC · Question #527
Andrew works as a Software Developer for Mansoft Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to enhance the security of the Web site by implementing…
The correct answer is B. Symmetric D. Asymmetric. SSL/TLS relies on asymmetric encryption for authentication and key exchange during the handshake, then switches to symmetric encryption for efficient bulk data transfer.
Question
Andrew works as a Software Developer for Mansoft Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to enhance the security of the Web site by implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use? Each correct answer represents a complete solution. Choose two.
Options
- AIPSec
- BSymmetric
- CSecret
- DAsymmetric
How the community answered
(20 responses)- A5% (1)
- B95% (19)
Why each option
SSL/TLS relies on asymmetric encryption for authentication and key exchange during the handshake, then switches to symmetric encryption for efficient bulk data transfer.
IPSec is a separate Layer 3 security protocol suite used for VPN tunneling and is not an encryption type used within SSL - it operates independently at a different OSI layer.
SSL uses symmetric encryption algorithms (such as AES or RC4) to encrypt session data after the handshake because symmetric ciphers are computationally efficient for encrypting large volumes of data with a shared session key.
'Secret' is not a recognized cryptographic classification - the correct standard categories are symmetric encryption (shared secret key) and asymmetric encryption (public/private key pair).
SSL uses asymmetric encryption (such as RSA or ECDH) during the handshake phase to authenticate the server via its digital certificate and to securely negotiate or exchange the symmetric session key without exposing it in transit.
Concept tested: SSL/TLS hybrid use of symmetric and asymmetric encryption
Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview
Topics
Community Discussion
No community discussion yet for this question.