nerdexam
GIAC

GSLC · Question #527

Andrew works as a Software Developer for Mansoft Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to enhance the security of the Web site by implementing…

The correct answer is B. Symmetric D. Asymmetric. SSL/TLS relies on asymmetric encryption for authentication and key exchange during the handshake, then switches to symmetric encryption for efficient bulk data transfer.

Security Architecture & Engineering

Question

Andrew works as a Software Developer for Mansoft Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to enhance the security of the Web site by implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use? Each correct answer represents a complete solution. Choose two.

Options

  • AIPSec
  • BSymmetric
  • CSecret
  • DAsymmetric

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    95% (19)

Why each option

SSL/TLS relies on asymmetric encryption for authentication and key exchange during the handshake, then switches to symmetric encryption for efficient bulk data transfer.

AIPSec

IPSec is a separate Layer 3 security protocol suite used for VPN tunneling and is not an encryption type used within SSL - it operates independently at a different OSI layer.

BSymmetricCorrect

SSL uses symmetric encryption algorithms (such as AES or RC4) to encrypt session data after the handshake because symmetric ciphers are computationally efficient for encrypting large volumes of data with a shared session key.

CSecret

'Secret' is not a recognized cryptographic classification - the correct standard categories are symmetric encryption (shared secret key) and asymmetric encryption (public/private key pair).

DAsymmetricCorrect

SSL uses asymmetric encryption (such as RSA or ECDH) during the handshake phase to authenticate the server via its digital certificate and to securely negotiate or exchange the symmetric session key without exposing it in transit.

Concept tested: SSL/TLS hybrid use of symmetric and asymmetric encryption

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Topics

#SSL#symmetric encryption#asymmetric encryption#TLS

Community Discussion

No community discussion yet for this question.

Full GSLC Practice