Exam 312-50 topic 3 question 57 discussion

Actual exam question from ECCouncil's 312-50

Question #: 57
Topic #: 3

The network administrator for a company is setting up a website with e-commerce capabilities. Packet sniffing is a concern because credit card information will be sent electronically over the Internet. Customers visiting the site will need to encrypt the data with HTTPS. Which type of certificate is used to encrypt and decrypt the data?

A. Asymmetric
B. Confidential
C. Symmetric
D. Non-confidential

Show Suggested Answer

Suggested Answer: A 🗳️

by Luukman at June 14, 2021, 3:43 p.m.

Comments

Submit Cancel

asadeyemo

1 year, 1 month ago

Https uses TLS/SSL protocol to establish handshake and that relies on asymmetric (2 pairs of keys). However, during a TLS handshake, the client and server agree upon new keys to use for symmetric encryption, called "session keys". Each new communication session will start with a new TLS handshake and use new session keys.

upvoted 1 times

...

Luukman

2 years, 7 months ago

Strange question.. think it should be: what type of encryption is used... then the answer is symetric. (Only the sessionkey is done with asymetric)

upvoted 2 times

Acidscars

1 year, 2 months ago

Agreed, a very poorly worded question. The second part seems to hint that the answer is symmetric, but the first part clearly says certificate which is asymmetric. It's pretty much a coin toss, but whats clear is the person who wrote this question should be maimed beyond recognition.

upvoted 2 times

...