In SSL/TLS, a specific set of protocols that a particular cryptographic system will use to provide protection is called a ________.

• A. System standard
• B. Cipher suite
• C. Security method
• D. Security policy

Answer: (B)

In SSL/TLS, the protection of a session is defined by a specific combination of cryptographic algorithms that will be used, and this is called a cipher suite. It specifies how the session is secured, including the key-exchange method to establish a shared key, the bulk encryption algorithm to protect the data, and the integrity/authentication method (MAC or AEAD) for messages. During the handshake, the client and server negotiate and agree on one cipher suite, and that choice governs all subsequent encryption and authentication for the connection. Other terms like system standard, security method, or security policy refer to broader concepts and do not describe the actual operational bundle used to protect a TLS session.