Symmetric and Asymmetric Encryption CASEJAVA Practice Questions (Page 7)

Questions 31–32

1. 31application · medium

   A Java web application must exchange a large volume of encrypted data with a partner system over the internet. The partner does not share any pre-existing secret. The security team wants to minimize the performance overhead of the encryption while ensuring that only the partner can decrypt the data. Which approach should the architect choose?

   • AEncrypt the entire data payload with the partner's RSA public key using RSA-OAEP.
   • BGenerate a random AES-256 session key, encrypt the data with it, and encrypt the session key with the partner's RSA public key before sending both.
   • CUse a static AES-256 key that was exchanged out-of-band by email and encrypt the data with it.
   • DUse ECC to encrypt the entire data payload with the partner's public key.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following is a symmetric encryption algorithm?

   • ADSA
   • BAES
   • CECC
   • DRSA
   Reveal Solution Discussion Select an answer first