Drag a concept onto its matching description — or click a concept then click the description.
Symmetric block cipher
Asymmetric public-key algorithm
Hash function
Symmetric block cipher (legacy)
Key exchange algorithm
Match each encryption algorithm to its type.
Drag a concept onto its matching description — or click a concept then click the description.
Symmetric block cipher
Asymmetric public-key algorithm
Hash function
Symmetric block cipher (legacy)
Key exchange algorithm
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
AES: Symmetric encryption
AES and DES are symmetric encryption algorithms, RSA is asymmetric, and SHA-256 is a hashing algorithm. Common confusions include misclassifying AES as asymmetric or RSA as symmetric, and confusing hash functions with encryption.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
AES: Symmetric encryption
Why this is correct
AES (Advanced Encryption Standard) uses the same key for encryption and decryption, making it a symmetric encryption algorithm.
RSA: Asymmetric encryption
Why this is correct
RSA (Rivest–Shamir–Adleman) uses a public/private key pair, making it an asymmetric encryption algorithm.
SHA-256: Hashing
Why this is correct
SHA-256 is a cryptographic hash function that produces a fixed-size output, used for data integrity, not encryption.
AES: Asymmetric encryption
Why it's wrong here
Incorrect — AES is symmetric, not asymmetric. Asymmetric encryption includes algorithms like RSA and ECC.
RSA: Symmetric encryption
Why it's wrong here
Incorrect — RSA is asymmetric, not symmetric. Symmetric algorithms include AES, DES, and 3DES.
SHA-256: Symmetric encryption
Why it's wrong here
Incorrect — SHA-256 is a hash function, not an encryption algorithm. Symmetric encryption uses keys for reversible encryption.
Quick reference
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
Go deeper
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.