100-160 Question 36
Single answerYou are tasked with securing sensitive customer data being transmitted between your company's web application and its users. The requirements specify that the encryption method must provide data confidentiality, integrity, and authenticity. Which encryption method is the most appropriate to use in this scenario?
- A
Symmetric encryption using AES
- B
Asymmetric encryption using RSA
- C
Hashing with SHA-256
- D
TLS (Transport Layer Security)
Show answer and explanation
Correct answer: D
Explanation
TLS (Transport Layer Security) is the most appropriate encryption method for securing data transmitted between a web application and its users. It provides end-to-end encryption for confidentiality, ensures data integrity through hashing, and verifies authenticity using digital certificates. This makes it the standard choice for secure communication over the internet.
- A. Incorrect.
Symmetric encryption using AES provides strong data confidentiality, but it does not inherently provide integrity or authenticity unless combined with additional protocols, such as HMAC.
- B. Incorrect.
Asymmetric encryption using RSA is used for secure key exchange and digital signatures, but it is not practical for encrypting entire communication sessions due to its computational overhead.
- C. Incorrect.
Hashing with SHA-256 provides data integrity but does not provide confidentiality or authenticity, as it is a one-way function and cannot encrypt data.
- D. Correct.
TLS (Transport Layer Security) is designed specifically for secure communication over networks. It uses a combination of symmetric encryption, asymmetric encryption, and hashing to provide confidentiality, integrity, and authenticity.