Question 1

Which of the following organizations is responsible for issuing and maintaining digital certificates?&#10;A)Certification Authority&#10;B)Certificate Company&#10;C)Certificate Storage&#10;D)Certificate Agency

Accepted Answer

A certificate authority (CA) is an organization that is responsible for issuing and maintaining digital certificates.
Key Takeaway: A certificate authority (CA) is an authority that issues and manages security credentials and public keys for message encryption. It checks with a registration authority (RA) to verify information provided by the requestor of a digital certificate. If the RA verifies the requestor's information, the CA can then issue a certificate. Depending on the public key infrastructure implementation, the certificate includes the owner's public key, the expiration date of the certificate, the owner's name, and other information about the public key owner.

Question 2

John wants to check the validity of a digital certificate. Which of the following should he use?&#10;A)Trust model&#10;B)Certificate policy&#10;C)Key escrow&#10;D)Certificate revocation list

Accepted Answer

Certificate revocation list (CRL) provides a detailed list of all the certificates that are no longer valid for a CA.
Key Takeaway: Certificate Revocation List provides a list of subscribers paired with digital certificate status. The list enumerates revoked certificates along with the reason(s) for revocation. The dates of certificate issue and the entities that issued them are also included. Additionally, each list contains a proposed date for the next release. When a potential user attempts to access a server, the server allows or denies access based on the CRL entry for that particular user. One limitation associated with a CRL is the fact that updates must be frequently downloaded to keep the list current.

Question 3

What is the block size of the SHA-1 algorithm?&#10;A)256 bits&#10;B)64 bits&#10;C)512 bits&#10;D)128 bits

Accepted Answer

SHA uses a block size of 512 bits.
Key Takeaway: SHA-1 is the most commonly-used function in the SHA family. It is employed in a large variety of popular security applications and protocols including TLS, SSL, PGP, SSH, S/MIME, and IPSec. SHA-1 is considered to be the successor to MD5, an earlier, widely-used hash function. The SHA algorithms were designed by the National Security Agency (NSA) and published as a US government standard.

Question 4

Which of the following Symmetric Algorithms uses a key size of up to 2,040 bits?&#10;A)Blowfish&#10;B)RC5&#10;C)IDEA&#10;D)CAST

Accepted Answer

RC5 uses a key size of up to 2,040 bits.
Key Takeaway: RC is an encryption family produced by RSA laboratories. RC stands for Ron's Code, or Rivest's Cipher. Ron Rivest is the author of this algorithm.

Question 5

David wants to use symmetric-key encryption to encrypt and decrypt data. How many keys will he need?&#10;A)3&#10;B)4&#10;C)2&#10;D)1

Accepted Answer

Symmetrical key encryptions are single-key systems that are entirely dependent on the privacy of the key.
Key Takeaway: Symmetric-key algorithms are a class of algorithms for cryptography that use trivially-related, often identical, cryptographic keys for both decryption and encryption. The encryption key is trivially related to the decryption key in that they may be identical or there may be a simple transformation to go between the two keys. In practice, the keys represent a shared secret between two or more parties that can be used to maintain a private information link.

Question 6

What is the block size used by the Blowfish algorithm?&#10;A)64 bits&#10;B)100 bits&#10;C)128 bits&#10;D)150 bits

Accepted Answer

Blowfish is an encryption system produced by Counterpane Systems that performs a 64-bit block cipher at very fast speeds.
Key Takeaway: Blowfish is a fast block cipher, except when changing keys. Each new key requires pre-processing equivalent to encrypting about 4 kilobytes of text, which is very slow compared to other block ciphers. Blowfish has a 64-bit block size and a variable key length from 32 up to 448 bits.

Question 7

Which of the following standards does S/MIME use?&#10;A)PKCS #7&#10;B)PKCS#4&#10;C)TLS&#10;D)X)509

Accepted Answer

Secure Multipurpose Internet Mail Extensions (S/MIME) is a standard used for encrypting e-mail. S/MIME contains signature data. It uses the PKCS #7 standard (Cryptographic Message Syntax Standard) and is the most widely supported standard used to secure e-mail communications.
Key Takeaway: S/MIME is a standard for public key encryption and signing of e-mail encapsulated in MIME. It provides the cryptographic security services which include authentication, message integrity, and non-repudiation of origin, privacy, and data security.

Question 8

Which of the following can PGP not encrypt?&#10;A)Full Disk&#10;B)Individual File&#10;C)E-mails&#10;D)Hard copies

Accepted Answer

PGP is incapable of encrypting printed materials, such as hard copies of documents.
Key Takeaway: PGP, or Pretty Good Privacy, is a computer program that provides encryption and decryption services for electronic data. PGP can encrypt and decrypt entire hard drive partitions, individual files, and emails.

Question 9

What is a hardware based encryption device that stores keys that protect information called?&#10;A)TPM&#10;B)DMZ&#10;C)SLP&#10;D)TFTP

Accepted Answer

A TPM is a hardware based encryption device
Key Takeaway: A TPM, or Trusted Platform Module, is a secure crypto processor that stores keys and other information to secure them. DMZ is a demilitarized zone used in network security, while SLP is Service Location Protocol, and TFTP is Trivial File Transfer Protocol

Question 10

A simple way to secure hardware, such as laptops and PCs, with a key or combination would be:&#10;A)Padlock&#10;B)Cable Locks&#10;C)Key pad&#10;D)Rope

Accepted Answer

A cable lock is used to physically secure hardware
Key Takeaway: A cable lock is simply a cable with some sort of lock integrated into it, and is a superb way of securing hardware such as laptops or PCs from physical theft.

Question 11

What is a company that can authorize the issuing of Digital Certificates called?&#10;A)Certificate Authority&#10;B)Certificate Assigner&#10;C)Certificate Headquarter&#10;D)Certificate Distributer

Accepted Answer

The answer of What is a company that can authorize...

Question 12

What is used for encrypting and decrypting disk partitions, e-mails, files and other data that use hashing, symmetric cryptography and public key cryptography?&#10;A)TFTP&#10;B)HTTPS&#10;C)PGP&#10;D)SSH

Accepted Answer

The answer of What is used for encrypting and decrypting...

Question 13

A way of concealing messages from even being seen except from the sender and receiver is:&#10;A)Cryptography&#10;B)Steganography&#10;C)Hiding&#10;D)Concealment

Accepted Answer

The answer of A way of concealing messages from even...

Question 14

What kind of trust model is in place when a CA is both the root and subordinate as is every other CA in the organization?&#10;A)Hybrid Trust&#10;B)Rooted Trust&#10;C)User Trust&#10;D)Network Trust

Accepted Answer

The answer of What kind of trust model is in...

Question 15

Which Cryptographic hash function uses a 128-bit hash and is not collision resistant?&#10;A)SHA&#10;B)AES&#10;C)MD5&#10;D)3DES

Accepted Answer

The answer of Which Cryptographic hash function uses a 128-bit...

Question 16

What is a digital signature?&#10;A)A png of someone's signature.&#10;B)A Cryptographic way of remotely signing a document.&#10;C)A mathematical way of verifying the authenticity of a document.&#10;D)A way to protect the user from themselves.

Accepted Answer

The answer of What is a digital signature?&#10;A)A png of...

Question 17

What was the first IEEE encryption standard for 802.11 wireless communications?&#10;A)WPA&#10;B)WEP&#10;C)WPA2&#10;D)CHAP

Accepted Answer

The answer of What was the first IEEE encryption standard...

Deck 16: Cryptography