When studying for the CompTIA Security+ exam, you’ll come across some cryptography objectives and it’s useful to understand the HTTPS process. One thing that confuses many people is how TLS (and previously SSL) works within the HTTPS process.
I’ve broken it down to the following steps with a diagram at the end that may help you understand it a little better.
- The client starts the session by clicking on the link.
- The server responds by sending a certificate. The certificate includes the server’s public key that is part of a matched private/public key pair. The private key is always kept private by the server.
- The client creates a random session key and encrypts the session key with the server’s public key. In the figure, the encrypted session key is UcaNP@$$.
- The client then sends the encrypted session key to the server.
- The server decrypts the session key with the server’s private key.
- The rest of the session uses the symmetric session key.
 | Pass the First Time! |
Up-to-date Content
New multiple-choice and performance-based questions added regularly
Pass the first time with quality practice test questions, performance-based questions, flashcards, and audio.Buy The Full Access Study Package Today
60 Days Access
Need more time? You can easily renew for another 60 days at a significantly reduced price.
All materials are available online shortly after making your payment.
Get the Security+ Full Access Study Package Here
Our online Security+ study materials are the perfect complement to the CompTIA Security+: Get Certified Get Ahead: SY0-501 Study Guide. They can also be used to help ensure you’re ready no matter what study guide you’re using.
This exam is expensive.
Make sure you’re ready before exam day.
Here’s what you’ll get:- All of the multiple-choice questions from the best-selling CompTIA Security+: Get Certified Get Ahead: SY0-501 Study Guide. See a demo here. All questions have full explanations so you’ll know why the correct answers are correct and why the incorrect answers are incorrect.
- Over 40 new multiple-choice questions we’ve added after publishing the study guide.
- Over 30 performance-based questions. See a demo here.
- All of the flashcards from the study guide. View them in any Web browser.
- All of the audio from the study guide. Listen to a sample here.
- Access to a free discount code for 10% off your Security+ voucher.
Buy The Full Access Study Package Today
60 Days Access
All materials are available online shortly after making your payment.
Can You Answer These Security+ questions?
- Question: What asymmetric key is used to encrypt when creating a secure web session within the HTTPS process?
- Question: What asymmetric key is used to decrypt when creating a secure web session within the HTTPS process?
- Question: What key is used to encrypt a secure web session within the HTTPS process?
You can find more details on cryptography in chapter 10 of this book:
If you just want some practice test questions to check your readiness for the Security+ exam, check out this book available in paperback and Kindle versions.
Security+ Practice Test Answers
Question: What asymmetric key is used to encrypt when creating a secure web session within the HTTPS process?
Answer: The web site’s public key.
Question: What asymmetric key is used to decrypt when creating a secure web session within the HTTPS process?
Answer: The web site’s private key.
Question: What key is used to encrypt a secure web session within the HTTPS process?
Answer: Symmetric
While it isn’t as important for cryptography, you should also know which ports are used by HTTP and HTTPS. HTTP uses port 80 and HTTPS uses port 443.
Master Security+ Performance Based Questions Video
| Pass the First Time! |
Up-to-date Content
New multiple-choice and performance-based questions added regularly
Pass the first time with quality practice test questions, performance-based questions, flashcards, and audio.Buy The Full Access Study Package Today
60 Days Access
Need more time? You can easily renew for another 60 days at a significantly reduced price.
All materials are available online shortly after making your payment.
Get the Security+ Full Access Study Package Here
Our online Security+ study materials are the perfect complement to the CompTIA Security+: Get Certified Get Ahead: SY0-601 Study Guide. They can also be used to help ensure you’re ready no matter what study guide you’re using.
This exam is expensive.
Make sure you’re ready before exam day.
Here’s what you’ll get:- All of the multiple-choice questions from the best-selling CompTIA Security+: Get Certified Get Ahead: SY0-601 Study Guide. See a demo here. All questions have full explanations so you’ll know why the correct answers are correct and why the incorrect answers are incorrect.
- Realistic SY0-601 Security+ Practice Test Questions
- Performance-based questions.
- All of the flashcards from the study guide. View them in any Web browser. See demo here
- All of the audio from the study guide.
- Access to a free discount code for 10% off your Security+ voucher.
Buy The Full Access Study Package Today
60 Days Access
All materials are available online shortly after making your payment.
