Classified Data Connection Algorithms

350-701 By islever Editorial Last updated

Short answer

CE AES-256 provides encryption for confidentiality and SHA-384 provides integrity for classified data.

Question

Which two algorithms must be used when an engineer is creating a connection that will have classified data across it? (Choose two.)
  1. RSA-3072
  2. ECDSA-256
  3. AES-256 Correct Answer
  4. RC4
  5. SHA-384 Correct Answer

Key Takeaways

Tests understanding of the difference between symmetric encryption (confidentiality) and hashing (integrity), often leading to selecting two encryption methods instead of one of each.

Identifies the correct combination of encryption and integrity algorithms for securing classified data connections. The page clarifies that both confidentiality and integrity are required.

Common mistake: Selecting AES-256 and RSA-3072, assuming two strong encryption algorithms are needed, while overlooking the necessity of a separate integrity mechanism like SHA-384.

Expert Analysis

Why the Answer Is Correct

The question requires protecting 'classified data,' which implies both confidentiality (preventing reading) and integrity (preventing tampering). AES-256 provides strong symmetric encryption for confidentiality. SHA-384 is a secure hashing algorithm used to ensure data integrity. Together, they form a complete security posture for data in transit.

Why the Other Options Are Wrong

RSA-3072 and ECDSA-256 are asymmetric algorithms primarily used for key exchange or digital signatures, not bulk data encryption. RC4 is a deprecated and insecure stream cipher that must never be used for classified data.

Community Comment Notes

As ITVI noted, the trick is recognizing you need 'one encryption and one integrity.' Pierre_Bouvier correctly identifies SHA-384 as an integrity verification tool. wowako argues for RSA-3072, but this misses the integrity requirement for the data payload itself.

Exam Strategy

When asked about securing data, always look for one option that provides encryption (AES) and one that provides integrity (SHA/Hash). Don't assume all options should be encryption algorithms.

Frequently Asked Questions

Why not use RSA-3072 for classified data?

RSA is used for key exchange or signatures, not bulk data encryption. It is too slow for encrypting large data streams compared to AES.

Is SHA-384 an encryption algorithm?

No, SHA-384 is a hashing algorithm used for integrity verification. It does not encrypt data but ensures it hasn't been altered.

More 350-701 FAQ →

Community Votes

AC
67%
CE
33%

67% of anonymous learners picked answer AC. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. wowako 👍 1
    A. RSA-3072: RSA with a 3072-bit key length is considered a strong encryption algorithm for key exchange and digital signatures. It is used for securely exchanging encryption keys over an insecure network, which is crucial for maintaining the security of classified data. C. AES-256: AES (Advanced Encryption Standard) with a 256-bit key length is a highly secure symmetric encryption algorithm. It is widely used for encrypting data due to its strong resistance to brute-force attacks and its suitability for securing classified information.
  2. Pierre_Bouvier 👍 1
    SHA-384 (Secure Hash Algorithm 384-bit) is a hashing algorithm used for data integrity verification. It does not encrypt data but ensures data integrity, making it insufficient alone for classified data protection.
  3. ITVI 👍 1
    C & E is correct and not A & C. The question is a bit tricky. but others are picking two encryptions only. Think about it, you only need one encryption and one integrity and off it goes.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

← Back to 350-701 Study Guide