GSLC · Question #567
You work as a Software Developer for PassGuide Inc. The company uses Visual Studio.NET as its application development platform. You create an application using .NET Framework. You use the…
The correct answer is A. RijndaelManaged. When no specific encryption requirements exist in a .NET Framework application, RijndaelManaged is the recommended symmetric class because it implements AES, the modern federal encryption standard.
Question
You work as a Software Developer for PassGuide Inc. The company uses Visual Studio.NET as its application development platform. You create an application using .NET Framework. You use the application to create an assembly. Now you need to encrypt assembly data. The company has not provided encryption requirements to you. Which of the following symmetric cryptography classes will you use to accomplish this task?
Options
- ARijndaelManaged
- B3DES
- CDES
- DTDEA
- ERSA
How the community answered
(35 responses)- A80% (28)
- B3% (1)
- C3% (1)
- D6% (2)
- E9% (3)
Why each option
When no specific encryption requirements exist in a .NET Framework application, RijndaelManaged is the recommended symmetric class because it implements AES, the modern federal encryption standard.
RijndaelManaged implements the Rijndael cipher, which is the underlying algorithm of AES (Advanced Encryption Standard) - the strongest, non-deprecated symmetric algorithm available in .NET Framework. It supports configurable key lengths (128, 192, or 256 bits), making it the appropriate default choice when the company has not specified encryption requirements. The other symmetric options in .NET are either deprecated or weaker by comparison.
3DES applies the DES cipher three times per block, which is slower and considered legacy technology, making it a poor default choice for new applications.
DES uses a 56-bit key that is cryptographically weak and has been deprecated due to its susceptibility to brute-force attacks.
TDEA (Triple Data Encryption Algorithm) is functionally equivalent to 3DES and shares the same legacy and performance drawbacks, so it is not recommended for new development.
RSA is an asymmetric (public-key) algorithm, not a symmetric cryptography class, and therefore cannot fulfill the requirement of selecting a symmetric cryptography class.
Concept tested: .NET Framework symmetric encryption - RijndaelManaged AES selection
Source: https://learn.microsoft.com/en-us/dotnet/api/system.security.cryptography.rijndaelmanaged
Topics
Community Discussion
No community discussion yet for this question.