SY0-501 · Question #540
Which of the following is an asymmetric function that generates a new and separate key every time it runs?
The correct answer is C. DHE. DHE (Diffie-Hellman Ephemeral) is an asymmetric key exchange protocol that generates new, temporary keys for each session, providing forward secrecy.
Question
Which of the following is an asymmetric function that generates a new and separate key every time it runs?
Options
- ARSA
- BDSA
- CDHE
- DHMAC
- EPBKDF2
How the community answered
(18 responses)- A6% (1)
- B17% (3)
- C72% (13)
- E6% (1)
Why each option
DHE (Diffie-Hellman Ephemeral) is an asymmetric key exchange protocol that generates new, temporary keys for each session, providing forward secrecy.
RSA is an asymmetric algorithm used for encryption and digital signatures, but it typically relies on static key pairs and does not inherently generate new, ephemeral keys for each session to achieve forward secrecy.
DSA (Digital Signature Algorithm) is an asymmetric algorithm exclusively used for digital signatures and does not generate new, ephemeral keys for session key exchange.
DHE (Diffie-Hellman Ephemeral) is an asymmetric key exchange algorithm specifically designed to generate new, temporary, and separate keys for each communication session. This property ensures forward secrecy, meaning the compromise of a long-term private key does not expose past session keys.
HMAC (Hashed Message Authentication Code) is a symmetric function used for message authentication and integrity, not an asymmetric function for key generation.
PBKDF2 (Password-Based Key Derivation Function 2) is a key derivation function that generates a cryptographic key from a password or passphrase and is not an asymmetric function for session key exchange.
Concept tested: Ephemeral Asymmetric Key Exchange and Forward Secrecy
Source: https://learn.microsoft.com/en-us/windows/win32/secauthn/forward-secrecy
Topics
Community Discussion
No community discussion yet for this question.