Question 1

2)Encryption always ensures data integrity.

Accepted Answer

Encryption only provides confidentiality by transforming data into a form that can't be understood by unintended recipients. It doesn't necessarily ensure data integrity. However, certain encryption algorithms can detect tampering by using message authentication codes or digital signatures.

Question 2

17)DSA was standardized as a federal information processing standard (____) called the digital signature standard (DSS).&#10;A) FIPS-086&#10;B) FIPS-112&#10;C) FIPS-156&#10;D) FIPS-186

Accepted Answer

DSA was standardized as a federal information processing standard (FIPS) called the digital signature standard (DSS). The correct FIPS standard number for DSS is FIPS-186.

Question 3

12)Symmetric key encryptions ensure confidentiality and data ____.&#10;A) integrity&#10;B) privacy&#10;C) availability&#10;D) repudiation

Accepted Answer

B

Question 4

4)DES is considered weak by today's standards due to the fact that the key size is only 56 bits.

Accepted Answer

DES is considered weak by today's standards because a 56-bit key can be brute-forced relatively quickly with modern computing power.

Question 5

10)A(n) ____ uses a keystream composed of completely random digits.&#10;A) XOR pad&#10;B) block cipher&#10;C) keystream cipher&#10;D) one-time pad

Accepted Answer

A one-time pad uses a keystream composed of completely random digits to encrypt plaintext, making it mathematically unbreakable. XOR pads and keystream ciphers also use keystreams, but they are not completely random and can be vulnerable to certain attacks. Block ciphers use fixed-length blocks of plaintext and a fixed key to encrypt, which is not the same as a one-time pad.

Question 6

18)____ is the process of performing a comprehensive search on the possible solution space by throwing all computational power an attacker can gather at breaking the system.&#10;A) Brute force&#10;B) Dictionary attack&#10;C) Meet-in-the-middle&#10;D) Man-in-the-middle

Accepted Answer

Brute force is the process of trying every possible combination of characters until the correct one is found. It is a powerful technique but can be very time-consuming and resource-intensive for complex systems.

Question 7

20)A digital certificate is standardized as ____ under IETF RFC 2459.&#10;A) X.501&#10;B) X.509&#10;C) X.512&#10;D) X.529

Accepted Answer

The standard for digital certificates is X.509, as specified in IETF RFC 2459. X.501 is a standard for directory services, X.512 and X.529 are not valid standards.

Question 8

6)A(n) ____ is the unique string of numbers that identifies a computer or server on the Internet.&#10;A) IP address&#10;B) ARP address&#10;C) MAC address&#10;D) DN

Accepted Answer

An IP address is a unique string of numbers that identifies a computer or server on the Internet. ARP addresses are used to map a network address (such as an IP address) to a physical address (such as a MAC address). MAC addresses are used to identify devices on a local network, but they are not unique on the Internet. DN (domain name) is a text-based address used to identify a website or other resource on the Internet, but it is not a unique string of numbers.

Question 9

13)Schemes that involve hashing with secret keys are called ____ or keyed hashes.&#10;A) MACs&#10;B) checksums&#10;C) parity bits&#10;D) parity keys

Accepted Answer

Schemes that involve hashing with secret keys are called Message Authentication Codes (MACs).

Question 10

1)A software system is only as secure as its weakest link.

Accepted Answer

This means that even if all other aspects of a software system are secure, if there is one weak link or vulnerability, the entire system is at risk of being compromised. Therefore, it is important to thoroughly test and secure all aspects of a software system.

Question 11

8)____ occurs when an attacker maliciously changes data in transit or in a medium.&#10;A) Spoofing&#10;B) Tampering&#10;C) Replay attack&#10;D) Snooping

Accepted Answer

The answer of 8)____ occurs when an attacker maliciously changes...

Question 12

19)A ____ is a piece of structured data that uses a digital signature to bind a public key with an identity.&#10;A) private key certificate&#10;B) private key signature&#10;C) public key signature&#10;D) public key certificate

Accepted Answer

The answer of 19)A ____ is a piece of structured...

Question 13

7)In ____, the source IP address in a packet is faked to make recipients suppose that packets are coming from trustworthy IP addresses.&#10;A) tampering&#10;B) snooping&#10;C) sniffing&#10;D) spoofing

Accepted Answer

The answer of 7)In ____, the source IP address in...

Question 14

5)A common use for cryptographic hash functions is to provide password-storage solutions.

Accepted Answer

The answer of 5)A common use for cryptographic hash functions...

Question 15

16)____ ensure(s) the integrity of a message sent between two parties who are unknown to each other.&#10;A) 3DES-EDE&#10;B) Digital signatures&#10;C) Symmetric encryption&#10;D) Block ciphers

Accepted Answer

The answer of 16)____ ensure(s) the integrity of a message...

Question 16

14)____ is defined as the exchange of information over an unsecured medium that allows each of two parties, the sender and the recipient, to compute a value that will be used to construct a secret key for a symmetric cipher during the rest of the communication.

A) Message authentication code
B) Digital certificate
C) Key agreement
D) Keyed hashes

Accepted Answer

The answer of 14)____ is defined as the exchange of...

Question 17

3)Parallel encryption is possible with a block cipher operating in CFB mode.

Accepted Answer

The answer of 3)Parallel encryption is possible with a block...

Question 18

11)____ was designed by IBM in the 1970s and is the most widely used symmetric cipher.&#10;A) RC4&#10;B) RC5&#10;C) DES&#10;D) AES

Accepted Answer

The answer of 11)____ was designed by IBM in the...

Question 19

9)The two primary types of symmetric ciphers are stream ciphers and ____ ciphers.&#10;A) bit&#10;B) character&#10;C) block&#10;D) byte

Accepted Answer

The answer of 9)The two primary types of symmetric ciphers...

Question 20

15)The security of the RSA algorithm depends on two mathematic problems: the problem of factoring very large numbers, p and q , and the ____ problem.&#10;A) RSA&#10;B) ElGamal&#10;C) Diffie-Hellman&#10;D) discrete logarithm

Accepted Answer

The answer of 15)The security of the RSA algorithm depends...

Question 21

23)____ was originally designed as part of the International Telecommunication Union's Open Standards Interconnect (OSI) effort as a general description language for the OSI protocol.&#10;A) PKCS&#10;B) OID&#10;C) ASN.1&#10;D) ASCII

Accepted Answer

The answer of 23)____ was originally designed as part of...

Question 22

27)____________________ means the assurance of data privacy-ensuring that no one can read the data except for the specific entity or entities intended.

Accepted Answer

The answer of 27)____________________ means the assurance of data privacy-ensuring...

Question 23

25)____s are used for naming almost every object type in X.509 certificates such as components of distinguished names, extensions, and so on.&#10;A) OID&#10;B) ASN.1&#10;C) PKCS&#10;D) Base64

Accepted Answer

The answer of 25)____s are used for naming almost every...

Question 24

24)____ encoding literally means a positional numbering system using a base of 64.&#10;A) ASN.1&#10;B) Base64&#10;C) OID&#10;D) PKCS#64

Accepted Answer

The answer of 24)____ encoding literally means a positional numbering...

Question 25

40)What are the prerequisites for a hash function to be classified as a secure cryptographic hash function?

Accepted Answer

The answer of 40)What are the prerequisites for a hash...

Question 26

21)____ means people who know each other can securely send messages to their friends.&#10;A) Certificate Authority&#10;B) PKI&#10;C) Web of trust&#10;D) Digital ring

Accepted Answer

The answer of 21)____ means people who know each other...

Question 27

30)A(n) ____________________ attack is a form of cryptanalysis that presumes that the attacker is able to choose arbitrary plaintexts to be encrypted, in effect obtaining the corresponding ciphertexts.

Accepted Answer

The answer of 30)A(n) ____________________ attack is a form of...

Question 28

37)Describe a block cipher counter (CTR) mode of operation.

Accepted Answer

The answer of 37)Describe a block cipher counter (CTR) mode...

Question 29

41)What information does a certificate contain?

Accepted Answer

The answer of 41)What information does a certificate contain?...

Question 30

34)What are the main advantages and disadvantages of Electronic Codebook (ECB)?

Accepted Answer

The answer of 34)What are the main advantages and disadvantages...

Question 31

29)____________________ is the assurance of nonalteration, meaning that the data either in transit or in storage has not been tampered.

Accepted Answer

The answer of 29)____________________ is the assurance of nonalteration, meaning...

Question 32

39)What are the main characteristics of AES?

Accepted Answer

The answer of 39)What are the main characteristics of AES?...

Question 33

22)____ is a set of computer networking standards developed by the International Standard Organization (ISO) and covering electronic directory services.&#10;A) ASCII&#10;B) ASN.1&#10;C) PKCS&#10;D) X.500

Accepted Answer

The answer of 22)____ is a set of computer networking...

Question 34

36)Describe the CBC rollover problem.

Accepted Answer

The answer of 36)Describe the CBC rollover problem....

Question 35

28)____________________ is the assurance that an entity is who it claims to be.

Accepted Answer

The answer of 28)____________________ is the assurance that an entity...

Question 36

31)For communication among former unknown parties, ____________________ refers to any method for distributing a secret amongst a group of participants in cryptography.

Accepted Answer

The answer of 31)For communication among former unknown parties, ____________________...

Question 37

35)What are the differences between dictionary and brute-force attacks?

Accepted Answer

The answer of 35)What are the differences between dictionary and...

Question 38

26)The company RSA Data Security initially published ____ to promote and facilitate the use of public key techniques.&#10;A) ASN.1&#10;B) Base64&#10;C) PKCS&#10;D) OID

Accepted Answer

The answer of 26)The company RSA Data Security initially published...

Question 39

33)Describe the main characteristics of symmetric key encryption.

Accepted Answer

The answer of 33)Describe the main characteristics of symmetric key...

Question 40

38)Describe the meet-in-the-middle attack.

Accepted Answer

The answer of 38)Describe the meet-in-the-middle attack....

Question 41

Match between columns&#10;                        Premises: when an attacker intercepts and records messages for sending at a later time, though the receiver thinks that the bogus traffic is legitimate&#10;when an attacker intercepts and records messages for sending at a later time, though the receiver thinks that the bogus traffic is legitimate&#10;when an attacker intercepts and records messages for sending at a later time, though the receiver thinks that the bogus traffic is legitimate&#10;when an attacker intercepts and records messages for sending at a later time, though the receiver thinks that the bogus traffic is legitimate&#10;when an attacker intercepts and records messages for sending at a later time, though the receiver thinks that the bogus traffic is legitimate&#10;when an attacker intercepts and records messages for sending at a later time, though the receiver thinks that the bogus traffic is legitimate&#10;when an attacker intercepts and records messages for sending at a later time, though the receiver thinks that the bogus traffic is legitimate&#10;when an attacker intercepts and records messages for sending at a later time, though the receiver thinks that the bogus traffic is legitimate&#10;when an attacker intercepts and records messages for sending at a later time, though the receiver thinks that the bogus traffic is legitimate&#10;identifies a specific entity as the source or origin of a given piece of data&#10;identifies a specific entity as the source or origin of a given piece of data&#10;identifies a specific entity as the source or origin of a given piece of data&#10;identifies a specific entity as the source or origin of a given piece of data&#10;identifies a specific entity as the source or origin of a given piece of data&#10;identifies a specific entity as the source or origin of a given piece of data&#10;identifies a specific entity as the source or origin of a given piece of data&#10;identifies a specific entity as the source or origin of a given piece of data&#10;identifies a specific entity as the source or origin of a given piece of data&#10;takes the original data, divides it into digits, and encrypts each digit one at a time&#10;takes the original data, divides it into digits, and encrypts each digit one at a time&#10;takes the original data, divides it into digits, and encrypts each digit one at a time&#10;takes the original data, divides it into digits, and encrypts each digit one at a time&#10;takes the original data, divides it into digits, and encrypts each digit one at a time&#10;takes the original data, divides it into digits, and encrypts each digit one at a time&#10;takes the original data, divides it into digits, and encrypts each digit one at a time&#10;takes the original data, divides it into digits, and encrypts each digit one at a time&#10;takes the original data, divides it into digits, and encrypts each digit one at a time&#10;traditional technique for detecting if data inadvertently changes during transmission&#10;traditional technique for detecting if data inadvertently changes during transmission&#10;traditional technique for detecting if data inadvertently changes during transmission&#10;traditional technique for detecting if data inadvertently changes during transmission&#10;traditional technique for detecting if data inadvertently changes during transmission&#10;traditional technique for detecting if data inadvertently changes during transmission&#10;traditional technique for detecting if data inadvertently changes during transmission&#10;traditional technique for detecting if data inadvertently changes during transmission&#10;traditional technique for detecting if data inadvertently changes during transmission&#10;divides data into blocks of a fixed length, often 64 or 128 bits, for cryptographic operations&#10;divides data into blocks of a fixed length, often 64 or 128 bits, for cryptographic operations&#10;divides data into blocks of a fixed length, often 64 or 128 bits, for cryptographic operations&#10;divides data into blocks of a fixed length, often 64 or 128 bits, for cryptographic operations&#10;divides data into blocks of a fixed length, often 64 or 128 bits, for cryptographic operations&#10;divides data into blocks of a fixed length, often 64 or 128 bits, for cryptographic operations&#10;divides data into blocks of a fixed length, often 64 or 128 bits, for cryptographic operations&#10;divides data into blocks of a fixed length, often 64 or 128 bits, for cryptographic operations&#10;divides data into blocks of a fixed length, often 64 or 128 bits, for cryptographic operations&#10;when an attacker monitors network traffic and records sensitive data such as user ID, passwords, accounts, or credit card numbers&#10;when an attacker monitors network traffic and records sensitive data such as user ID, passwords, accounts, or credit card numbers&#10;when an attacker monitors network traffic and records sensitive data such as user ID, passwords, accounts, or credit card numbers&#10;when an attacker monitors network traffic and records sensitive data such as user ID, passwords, accounts, or credit card numbers&#10;when an attacker monitors network traffic and records sensitive data such as user ID, passwords, accounts, or credit card numbers&#10;when an attacker monitors network traffic and records sensitive data such as user ID, passwords, accounts, or credit card numbers&#10;when an attacker monitors network traffic and records sensitive data such as user ID, passwords, accounts, or credit card numbers&#10;when an attacker monitors network traffic and records sensitive data such as user ID, passwords, accounts, or credit card numbers&#10;when an attacker monitors network traffic and records sensitive data such as user ID, passwords, accounts, or credit card numbers&#10;provides identification of the specific entity involved in isolation from any other activity that the entity might want to perform&#10;provides identification of the specific entity involved in isolation from any other activity that the entity might want to perform&#10;provides identification of the specific entity involved in isolation from any other activity that the entity might want to perform&#10;provides identification of the specific entity involved in isolation from any other activity that the entity might want to perform&#10;provides identification of the specific entity involved in isolation from any other activity that the entity might want to perform&#10;provides identification of the specific entity involved in isolation from any other activity that the entity might want to perform&#10;provides identification of the specific entity involved in isolation from any other activity that the entity might want to perform&#10;provides identification of the specific entity involved in isolation from any other activity that the entity might want to perform&#10;provides identification of the specific entity involved in isolation from any other activity that the entity might want to perform&#10;the U.S. federal government standard for digital signatures, proposed by NIST in August 1991&#10;the U.S. federal government standard for digital signatures, proposed by NIST in August 1991&#10;the U.S. federal government standard for digital signatures, proposed by NIST in August 1991&#10;the U.S. federal government standard for digital signatures, proposed by NIST in August 1991&#10;the U.S. federal government standard for digital signatures, proposed by NIST in August 1991&#10;the U.S. federal government standard for digital signatures, proposed by NIST in August 1991&#10;the U.S. federal government standard for digital signatures, proposed by NIST in August 1991&#10;the U.S. federal government standard for digital signatures, proposed by NIST in August 1991&#10;the U.S. federal government standard for digital signatures, proposed by NIST in August 1991&#10;a fixed-size checksum created by cryptographic hash functions&#10;a fixed-size checksum created by cryptographic hash functions&#10;a fixed-size checksum created by cryptographic hash functions&#10;a fixed-size checksum created by cryptographic hash functions&#10;a fixed-size checksum created by cryptographic hash functions&#10;a fixed-size checksum created by cryptographic hash functions&#10;a fixed-size checksum created by cryptographic hash functions&#10;a fixed-size checksum created by cryptographic hash functions&#10;a fixed-size checksum created by cryptographic hash functions

Accepted Answer

The Answer of Digital signature algorithm (DSA) and Replay attack is...

Question 42

What is the format of a X.500 distinguished name?

Accepted Answer

The answer of What is the format of a X.500...

Deck 1: Introduction to Security Concepts