A security administrator must implement a system to allow clients to securely negotiate encryption keys with the company's server over a public unencrypted communication channel. Which of the…

The correct answer is D. ECDHE E. Diffie-Hellman. Both Diffie-Hellman (DH) and ECDHE (Elliptic Curve Diffie-Hellman Ephemeral) are key exchange protocols that allow two parties to independently derive a shared secret key over an insecure, public channel without ever transmitting the key itself - making interception by…

General security concepts

Question

A security administrator must implement a system to allow clients to securely negotiate encryption keys with the company's server over a public unencrypted communication channel. Which of the following implements the required secure key negotiation? (Select TWO).

Options

APBKDF2
BSymmetric encryption
CSteganography
DECDHE
EDiffie-Hellman

How the community answered

(62 responses)

A
8% (5)
B
16% (10)
C
3% (2)
D
73% (45)

Explanation

Both Diffie-Hellman (DH) and ECDHE (Elliptic Curve Diffie-Hellman Ephemeral) are key exchange protocols that allow two parties to independently derive a shared secret key over an insecure, public channel without ever transmitting the key itself - making interception by eavesdroppers impossible. ECDHE is the elliptic-curve variant that also provides forward secrecy via ephemeral keys. PBKDF2 is a key derivation function used to strengthen passwords, not to negotiate keys between parties. Symmetric encryption requires a pre-shared key and cannot establish one over an untrusted channel. Steganography hides data within other media and has no role in key exchange.

Topics

#Diffie-Hellman#ECDHE#key exchange#asymmetric cryptography

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice