nerdexam
Fortinet

NSE4 · Question #467

Which of the following options best defines what Diffie-Hellman is?

The correct answer is B. A "key-agreement" protocol.. Diffie-Hellman is a cryptographic protocol designed to allow two parties to securely establish a shared secret key over an insecure communication channel.

Submitted by devops_kid· Apr 18, 2026VPN and Routing

Question

Which of the following options best defines what Diffie-Hellman is?

Options

  • AA symmetric encryption algorithm.
  • BA "key-agreement" protocol.
  • CA "Security-association-agreement" protocol.
  • DAn authentication algorithm.

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    87% (26)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Diffie-Hellman is a cryptographic protocol designed to allow two parties to securely establish a shared secret key over an insecure communication channel.

AA symmetric encryption algorithm.

Diffie-Hellman is a key-exchange protocol, not an algorithm used for the symmetric encryption of data itself.

BA "key-agreement" protocol.Correct

Diffie-Hellman is fundamentally a key-agreement protocol, enabling two entities to agree upon a shared symmetric encryption key without having exchanged any prior secret information.

CA "Security-association-agreement" protocol.

While related to establishing secure connections, its primary and most specific function is the establishment of a shared key, not the broader security association agreement.

DAn authentication algorithm.

Diffie-Hellman facilitates key exchange for confidentiality but does not inherently provide authentication for the parties involved.

Concept tested: Diffie-Hellman key exchange protocol function

Source: https://learn.microsoft.com/en-us/windows/security/information-protection/tpm/tpm-key-attestation-diffie-hellman

Topics

#Diffie-Hellman#Key exchange#Cryptography#VPN

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice