100-160 Question 42
Single answerAn organization is planning to transmit sensitive customer data over the internet and wants to ensure it is protected from interception. Which of the following encryption methods and strategies would be the most appropriate to secure the data in transit?
- A
Use a symmetric encryption algorithm like AES with a 256-bit key during transmission.
- B
Use a hashing algorithm like SHA-256 to encrypt the data during transmission.
- C
Use an asymmetric encryption algorithm like RSA for the entire data transmission.
- D
Use SSL/TLS protocols to establish a secure encrypted channel for data transmission.
Show answer and explanation
Correct answer: D
Explanation
When securing data in transit, using SSL/TLS protocols is the most appropriate choice because they provide a secure and efficient way to encrypt data during transmission. SSL/TLS uses a combination of asymmetric encryption for key exchange and symmetric encryption for the actual data transfer, ensuring both security and performance. This is better suited for the scenario than using standalone encryption or hashing techniques.
- A. Incorrect.
Symmetric encryption algorithms like AES are secure for encrypting data, but they are not directly used for securing data in transit over the internet. Instead, they are often a part of protocols like SSL/TLS.
- B. Incorrect.
Hashing algorithms like SHA-256 are not encryption methods; they are used to ensure data integrity by generating a unique checksum and cannot be used to encrypt data for secure transmission.
- C. Incorrect.
Asymmetric encryption algorithms like RSA are secure for key exchange and encrypting small amounts of data but are not practical for encrypting an entire data transmission due to performance constraints.
- D. Correct.
SSL/TLS protocols are specifically designed to secure data in transit by establishing an encrypted channel between the sender and receiver. They use a combination of symmetric and asymmetric encryption to ensure confidentiality and integrity.