SSL/ TLA

Question 1

How is a MITMA countermeasured

Answer 1

SSL TLS uses digital certificates to authenticate the server

Client verifies the certificate to ensure it is communicating with the legitimate server

Question 2

How is a replay attack countermeasured

Answer 2

SSL TLS includes unique randomly generated nonces in the handshake process

These nonces ensure each session is unique and prevent an attacker from replaying old handshakes

Question 3

How is a brute force attack countermeasured

Answer 3

SSL TLS uses secure encryption algorithms and sufficiently long key sizes to make brute force attacks computationally infeasible

Question 4

How is IP spoofing countermeasured

Answer 4

SSL TLS requires cryptographic handshake between the client and the server making IP address based spoofing ineffective

Question 5

Suitable key management approach for a company with <50 users

Answer 5

Public key infrastructure PKI with centralised certificate authority

Question 6

Reasons for the padding field in ESP

Answer 6

Alignment to block cipher size. Padding ensures that the payload aligns correctly.

Protection against traffic analysis. - by adding random padding ESP prevents attackers from inferring information based on packet length enhancing confidentiality