CEH Network and Web Application Attacks Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  AES: Symmetric encryption

  Why this is correct

  AES (Advanced Encryption Standard) is a highly efficient symmetric block cipher, meaning it utilizes the exact same secret key for both encrypting plaintext into ciphertext and decrypting ciphertext back into plaintext. This shared secret key must be securely exchanged between communicating parties prior to any data transmission, making key distribution a critical aspect of its implementation.

• ✓

  RSA: Asymmetric encryption

  Why this is correct

  RSA is a foundational asymmetric encryption algorithm, also known as a public-key cryptosystem, which relies on a mathematically linked pair of keys: a public key for encryption and a private key for decryption. This architecture allows anyone to encrypt data using the widely distributed public key, but only the holder of the corresponding private key can successfully decrypt it, enabling secure communication without prior shared secrets.

• ✓

  3DES: Symmetric encryption

  Why this is correct

  Triple DES (3DES) is a symmetric block cipher that applies the original DES algorithm three times to each data block, typically using two or three distinct keys to enhance security over single DES. As a symmetric algorithm, it requires the sender and receiver to possess the identical secret key for both encryption and decryption operations, making secure key exchange paramount for its secure deployment.

• ✓

  ECC: Asymmetric encryption

  Why this is correct

  Elliptic Curve Cryptography (ECC) is an advanced asymmetric encryption algorithm that leverages the mathematical properties of elliptic curves over finite fields to create public and private key pairs. ECC offers comparable security strength to RSA with significantly smaller key sizes, leading to more efficient computations, reduced bandwidth usage, and faster performance, particularly beneficial for mobile and resource-constrained environments.

• ✗

  AES: Asymmetric encryption

  Why it's wrong here

  This option is incorrect because AES (Advanced Encryption Standard) is fundamentally a symmetric encryption algorithm, not asymmetric. Symmetric encryption uses a single, shared secret key for both encryption and decryption, whereas asymmetric encryption relies on a distinct public and private key pair, a characteristic AES does not possess.

• ✗

  RSA: Symmetric encryption

  Why it's wrong here

  This option is incorrect as RSA is a prime example of an asymmetric (public-key) encryption algorithm, not a symmetric one. Asymmetric algorithms employ a pair of mathematically linked keys—one public for encryption and one private for decryption—a paradigm fundamentally different from symmetric encryption's single shared secret key model.

Go deeper

Related to this question