In the TLS handshake sequence, what is the second step?

• A. Server Hello
• B. Client Hello
• C. Key Exchange
• D. Finished

Answer: (B)

The key idea here is how TLS negotiates its cryptographic parameters at the start of a session. The client begins by sending a ClientHello to propose supported protocol versions, a random value, a session identifier, and a list of cipher suites and extensions it can use. The next message from the server is ServerHello, which selects the actual protocol version and cipher suite that both sides will use, and provides its own random value and session identifier. This exchange is essential because it establishes the exact parameters for the secure connection.

After ServerHello, the server typically sends its certificate (to prove identity) and may include additional messages used for the key exchange. The actual key exchange messages come later, and the Finished messages wrap up the handshake to verify that the negotiation succeeded and the channel is secure. So, the second step is ServerHello, since it starts the mutual agreement on how the session will be secured.