exam questions

Exam SSCP All Questions

View all questions & answers for the SSCP exam

Exam SSCP topic 5 question 129 discussion

Actual exam question from ISC's SSCP
Question #: 129
Topic #: 5
[All SSCP Questions]

Which of the following would best define a digital envelope?

  • A. A message that is encrypted and signed with a digital certificate.
  • B. A message that is signed with a secret key and encrypted with the sender's private key.
  • C. A message encrypted with a secret key attached with the message. The secret key is encrypted with the public key of the receiver.
  • D. A message that is encrypted with the recipient's public key and signed with the sender's private key.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
A digital envelope for a recipient is a combination of encrypted data and its encryption key in an encrypted form that has been prepared for use of the recipient.
It consists of a hybrid encryption scheme in sealing a message, by encrypting the data and sending both it and a protected form of the key to the intended recipient, so that one else can open the message.
In PKCS #7, it means first encrypting the data using a symmetric encryption algorithm and a secret key, and then encrypting the secret key using an asymmetric encryption algorithm and the public key of the intended recipient.
Source: SHIREY, Robert W., RFC2828: Internet Security Glossary, may 2000.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Currently there are no comments in this discussion, be the first to comment!
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...