H12-891_V1-0 practice question 14 of 35
SSH uses asymmetric encryption algorithms AES and DES to achieve security for data transmission, and uses HMAC to ensure the complete integrity of integer data
Full set: 607 questionsThe statement is false for two primary reasons. First, AES (Advanced Encryption Standard) and DES (Data Encryption Standard) are symmetric encryption algorithms, not asymmetric. SSH uses asymmetric algorithms like RSA or DSA for key exchange and authentication, but it employs symmetric algorithms like AES for encrypting the bulk data stream for performance. Second, HMAC (Hash-based Message Authentication Code) ensures the integrity of entire data packets, not just "integer data."
A (True): This option is incorrect because the statement contains fundamental inaccuracies regarding the types of encryption algorithms used by SSH for data transmission and the scope of HMAC's integrity checks.
1. Huawei HedEx Documentation, NE40E V800R012C10 Configuration Guide - Security, Section: "SSH Configuration". The guide states, "SSH uses asymmetric encryption algorithms (RSA, DSA, and ECC) to implement identity authentication and key exchange, and symmetric encryption algorithms (such as AES and 3DES) to encrypt data."
2. IETF RFC 4251, The Secure Shell (SSH) Protocol Architecture, Section 1: "Introduction". This RFC specifies that SSH "uses strong cryptographic techniques to protect these connections. It provides authentication, confidentiality, and integrity." It further details the use of symmetric encryption for confidentiality and MACs for integrity.
3. IETF RFC 4253, The Secure Shell (SSH) Transport Layer Protocol, Section 6.4: "Data Integrity". This section specifies the use of MAC algorithms (such as HMAC-SHA1) to protect the integrity of transmitted data.
Keep practicing
Take the free H12-891_V1-0 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other H12-891_V1-0 practice questions
- Question 1In the use of the LACP protocol, the following description is correct ?( Multiple select).
- Question 2In a shared network, what mechanism does PIM-SM use to prevent duplicate traffic?( Single…
- Question 3The default configured switch has an empty MAC address table at this time , and Host A co…
- Question 4The following description of MP-BGP is incorrect?( Single choice questions).
- Question 5A bookstore provides a wired network for customers to learn online. However, one day, it …
- Question 6If the Option field value in the 0SPFv3 Hello message issued by the router's GIgabit Ethe…
