Which description best defines a cipher suite?

• A. A bundle of root certificates
• B. A set of cryptographic algorithms used for key exchange, authentication, and encryption
• C. A single encryption algorithm
• D. A protocol version

Answer: (B)

A cipher suite is the collection of cryptographic algorithms that a TLS/SSL connection will use. It defines how keys are exchanged, how each side is authenticated, how the data is encrypted, and how its integrity is verified (often through a MAC or an AEAD mode). During the TLS handshake, the client and server negotiate this set to agree on the exact protection methods for the session.

A bundle of root certificates relates to trust anchors, not the protection mechanisms of the connection itself, so that’s not what a cipher suite describes. A single encryption algorithm doesn’t cover key exchange and authentication options, which is why it’s not sufficient. A protocol version indicates the overall protocol, but not the specific algorithms picked for the session. Therefore, the description that best defines a cipher suite is a set of cryptographic algorithms used for key exchange, authentication, and encryption.