GIAC GSEC Exam - Topic 1 Question 2 Discussion

Actual exam question for GIAC's GSEC exam

Question #: 2
Topic #: 1

[All GSEC Questions]

Which of the following statements regarding Secure Sockets Layer (SSL) are true?

Each correct answer represents a complete solution. Choose all that apply.

ASSL provides message integrity to prevent alteration to the message.

BDuring SSL session, information is encrypted to prevent unauthorized disclosure.

CSSL can process credit cards.

DSSL can support 128-bit encryption.

Show Suggested Answer

Suggested Answer: A, B, D

Secure Sockets Layer (SSL) is a protocol used to transmit private documents via the Internet. SSL uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity. Using the SSL protocol, clients and servers can

communicate in a way that prevents eavesdropping and tampering of data on the Internet. Many Web sites use the SSL protocol to obtain confidential user information, such as credit card numbers. By convention, URLs that require an SSL connection start with https: instead of http:. By default, SSL uses port 443 for secured communication.

Answer option C is incorrect. SSL can only secure the communication transport. Processing of credit cards cannot be done by SSL.

by Merlyn at May 04, 2022, 01:25 PM

Limited Time Offer

25%

Off

Get Premium GSEC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Zita

4 months ago

Not sure about that credit card thing... sounds off.

upvoted 0 times

...

Teddy

4 months ago

Yup, 128-bit encryption is supported by SSL.

upvoted 0 times

...

Lonna

4 months ago

Wait, can SSL really process credit cards?

upvoted 0 times

...

Olen

4 months ago

Totally agree, encryption is key during SSL sessions!

upvoted 0 times

...

Karima

5 months ago

SSL does provide message integrity.

upvoted 0 times

...

Daniel

5 months ago

I vaguely remember that SSL supports 128-bit encryption, but I wonder if there are higher standards now.

upvoted 0 times

...

Peggy

5 months ago

I feel like I saw a question about SSL and credit card processing before, but I can't recall if SSL itself handles that.

upvoted 0 times

...

Sherell

5 months ago

I think option B is definitely true because encryption is a key part of SSL, right?

upvoted 0 times

...

Youlanda

5 months ago

I remember that SSL does provide message integrity, but I'm not entirely sure if it's the only thing it does.

upvoted 0 times

...

Fannie

5 months ago

I feel pretty confident about this one. The two key steps are checking the capacity LTUs and adding a new virtual hard disk to the VM. The other options seem like red herrings.

upvoted 0 times

...

Roselle

5 months ago

Hmm, this question seems a bit tricky. I'm not too familiar with the security features of OSB, so I'll have to think this through carefully.

upvoted 0 times

...

Luz

5 months ago

Ah, I see now. The key is to look for the configuration that would allow the ISE policies to be properly applied. Disabling KeyWrap or using ASCII for the key input format seem like the most likely solutions here.

upvoted 0 times

...

Afton

5 months ago

I have a vague memory that the acquisition with the highest combined value minus the purchase price is the best choice. Is that right?

upvoted 0 times

...