015_Key Exchange - CompTIA Security+ SY0-701 - 1.4

What is a limitation of out-of-band key exchange?

• It is impractical for internet-based communications.

• It requires a high level of technical expertise.

• It is faster than in-band key exchange.

• It is more secure than symmetric key exchange.

Which of the following is a key management practice?

• Using the same key for all users

• Regularly rotating encryption keys

• Storing keys in plain text

• Sharing keys over unsecured channels

__________________ is used prevalently on the web, it allows for secure messages to be sent between parties without having to agree on, or share, a secret key. It uses an encryption scheme in which the encryption key is made public, but the decryption key is kept private.

• Public key

• Private key

• Symmetric key

• Hash function

Which method uses asymmetric encryption to securely exchange a symmetric key?

• In-band key exchange

• Symmetric key exchange

• Out-of-band key exchange

• Public key cryptography

Which of the following is a characteristic of symmetric encryption?

• It uses a pair of keys: one public and one private.

• It uses the same key for both encryption and decryption.

• It is slower than asymmetric encryption.

• It is primarily used for digital signatures.

What is a characteristic of session keys?

• They are permanent and used for multiple sessions.

• They are temporary and used for a single session.

• They are used for encryption only.

• They are shared among multiple users.

Which encryption method uses the same key for both encryption and decryption?

• Asymmetric encryption

• Symmetric encryption

• Hashing

• Public key encryption

What is exchanged in public key cryptography for key exchange?

• Private keys

• Public keys

• Symmetric keys

• Hash values

What type of key is not shared and computers cannot decrypt a message without it?

• Public key

• Private key

• Symmetric key

• Asymmetric key

How does key exchange without sending a key work?

• By generating the same symmetric key on both ends without sending it.

• By sending the key through a secure channel.

• By using a public key to encrypt the key before sending.

• By creating a unique key for each session and sharing it openly.