Examkin

Question

Difficulty: MediumCryptographic Concepts and Algorithms

A security analyst is designing a secure telemetry collection architecture for edge gateway devices transmitting environmental data to an enterprise cloud endpoint. The design mandates establishing keying material that ensures perfect forward secrecy and validating the authenticity and data integrity of each transmitted payload with minimal performance overhead. Which of the following cryptographic techniques should the analyst select to meet these requirements? (Select TWO.)

  1. Elliptic Curve Diffie-Hellman Ephemeral (ECDHE)Answer
  2. Hash-based Message Authentication Code (HMAC)Answer
  3. C
    Static RSA key exchange
  4. D
    Unkeyed SHA-256 digest generation
  5. E
    Certificate Signing Request (CSR) submission per payload

Answer

The analyst should select Elliptic Curve Diffie-Hellman Ephemeral (ECDHE) for perfect forward secrecy during key negotiation, and Hash-based Message Authentication Code (HMAC) for efficient payload authenticity and integrity verification.
Elliptic Curve Diffie-Hellman Ephemeral (ECDHE) provides perfect forward secrecy through per-session temporary key generation, while Hash-based Message Authentication Code (HMAC) provides low-overhead authenticity and integrity checks via symmetric key hashing.

Step-by-Step Solution

1
Evaluate key exchange requirements for Perfect Forward Secrecy (PFS)
Identify that PFS requires ephemeral key exchange algorithms such as ECDHE.
Ephemeral key exchanges generate temporary keys for every session so that compromise of long-term server keys does not reveal past communications.
2
Evaluate payload validation requirements for authenticity and integrity
Identify that lightweight, keyed symmetric hashing such as HMAC satisfies both integrity and authenticity without high computational overhead.
HMAC incorporates a shared secret into the hashing process, ensuring that only authorized keyholders can produce a valid MAC code.

Key Concept

Cryptographic Key Exchange Mechanisms and Message Integrity Verification
Rate this question

Topics

Cryptographic Concepts and Algorithms

More questions from this topic