A healthcare organization is in the process of building and deploying a new web server in the DMZ that will enable public Internet users the ability to securely send
and receive messages from their primary care physicians. Which of the following should the security administrator consider?

A.
An in-band method for key exchange and an out-of-band method for the session

B.
An out-of-band method for key exchange and an in-band method for the session

C.
A symmetric algorithm for key exchange and an asymmetric algorithm for the session

D.
An asymmetric algorithm for key exchange and a symmetric algorithm for the session