What is a cipher suite in TLS?
- A.A collection of encryption software, addressed by Requirement 3.6 through documented key-management policies that cover the full lifecycle of the keys protecting stored account data
- B.A type of firewall, which Requirement 1.5.1 extends to computing devices that connect to both untrusted networks and the CDE, such as employee laptops used for remote work
- C.A set of algorithms used together for a TLS connection, including the key exchange algorithm, bulk encryption algorithm, and message authentication code
- D.A set of passwords
Why C is correct
A cipher suite defines the combination of algorithms for key exchange, encryption, and authentication used in a TLS connection.
Know someone studying for PCI DSS? Send them this one.