SY0-301 · Question #53
Which of the following can use RC4 for encryption? (Select TWO).
The correct answer is B. SSL C. WEP. RC4 is a stream cipher historically used in both WEP (Wi-Fi encryption) and SSL (secure web communications), both of which are now considered cryptographically weak for this reason.
Question
Which of the following can use RC4 for encryption? (Select TWO).
Options
- ACHAP
- BSSL
- CWEP
- DAES
- E3DES
How the community answered
(48 responses)- A2% (1)
- B88% (42)
- D8% (4)
- E2% (1)
Why each option
RC4 is a stream cipher historically used in both WEP (Wi-Fi encryption) and SSL (secure web communications), both of which are now considered cryptographically weak for this reason.
CHAP (Challenge Handshake Authentication Protocol) uses MD5 for its challenge-response hashing, not RC4.
SSL (Secure Sockets Layer) supported RC4 as one of its cipher suite options for encrypting data in transit; this usage was a major factor in SSL's deprecation in favor of TLS.
WEP (Wired Equivalent Privacy) used RC4 as its core encryption algorithm with a static key scheme that proved trivially breakable, leading to WEP's complete obsolescence.
AES (Advanced Encryption Standard) is a block cipher that uses its own substitution-permutation network, entirely separate from RC4.
3DES (Triple DES) applies the DES block cipher algorithm three times and has no dependency on RC4.
Concept tested: RC4 cipher usage in WEP and SSL
Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview
Topics
Community Discussion
No community discussion yet for this question.