Study. uk . com
  1. Home
  2. All questions
  3. Question 557

CompTIA Security+ study material · question 557 of 611

Why can a protocol using only static long-term keys not provide forward secrecy?

  1. Static keys are shorter than ephemeral ones
  2. Static keys cannot be stored in hardware
  3. Static keys cannot be validated by a certificate authority
  4. The same key protects every session, so compromising it exposes all recorded traffic
Show the answer

Answer: D. The same key protects every session, so compromising it exposes all recorded traffic

Forward secrecy requires per-session keys that are discarded, which static reuse by definition prevents.

Source: RFC 8446 (IETF) — RFC 8446 § 1.2 Major Differences from TLS 1.2

Challenge yourself on this topic → Study as cards