Question 1

The ____ package is composed of mostly abstract classes and interfaces that encapsulate security concepts to provide a configurable, fine-grained access-control security architecture.
A) java.security.provider
B) java.jca
C) java.security.jca
D) java.security

Accepted Answer

The java.security package encapsulates classes and interfaces related to security concepts and provides a configurable, fine-grained access-control security architecture. The other options (java.security.provider and java.jca) are specific to security providers and cryptographic algorithms, respectively, and do not encapsulate the broader security concepts provided by the java.security package. The java.security.jca package is not a valid package in Java.

Question 2

____ implements Java technology version of secure sockets layer (SSL) and transport layer security (TLS) protocols.
A) JSSE
B) java.pkcs
C) java.security.spec
D) java.security.cert

Accepted Answer

JSSE (Java Secure Socket Extension) is the implementation of SSL and TLS protocols in Java technology. Option B, C, and D are not relevant to SSL and TLS implementation.

Question 3

A ____ is the instruction that describes the set of operations to be performed on the given input in order to produce the cryptographic output.
A) mode
B) transformation
C) provider
D) control

Accepted Answer

A transformation is the set of operations performed on the input to produce the cryptographic output. Modes refer to the way data is processed and encrypted, providers refer to the software or hardware used to perform cryptographic operations, and control refers to the management of access and authorization to cryptographic functions.

Question 4

Before JDK 1.4, certification path validation was done implicitly in signature and signed JAR file verification.

Accepted Answer

Before JDK 1.4, certification path validation was done implicitly in signature and signed JAR file verification.

Question 5

____ is a block cipher mode in which every plaintext block encrypted with a block cipher is first exclusive-ORed with the previous ciphertext block.
A) CBC
B) ECB
C) OFB
D) CFB

Accepted Answer

CBC (Cipher Block Chaining) mode operates by XORing each plaintext block with the previous ciphertext block before encryption.

Question 6

The basic security in ____ comes from the fact it is relatively easy to multiply two huge prime numbers together to obtain their product, but it is computationally difficult to go the reverse direction.
A) ElGamal
B) DES
C) IDEA
D) RSA

Accepted Answer

The statement describes the fundamental principle of RSA encryption, where large prime numbers are used for key generation and their product for encryption. The difficulty in factoring the product back to its primes provides the security in the scheme. ElGamal, DES, and IDEA use different encryption methods and are not relevant to the given principle.

Question 7

____ is a block cipher mode in which each possible block of plaintext has a defined corresponding ciphertext value.
A) CBC
B) CFB
C) OFB
D) ECB

Accepted Answer

ECB (Electronic Codebook) mode uses a fixed encryption key to encrypt each block of the plaintext separately. The same plaintext block will result in the same ciphertext block. While this may seem secure, it makes the cipher vulnerable to attacks such as frequency analysis and pattern recognition. Thus, ECB mode is not considered a secure block cipher mode and should be avoided.

Question 8

Java cryptography architecture ( JCA) is first introduced in ____.
A) JDK 1.0
B) JDK 1.1
C) JDK 1.4
D) JDK 5.0

Accepted Answer

The Java Cryptography Architecture (JCA) was first introduced in JDK 1.1, providing a framework and implementations for encryption, key generation and management, and secure random number generation, among other cryptographic functionalities.

Question 9

Message digests such as MD2 and MD5 can ensure integrity and confidentiality of a message.

Accepted Answer

Message digests such as MD2 and MD5 can only ensure integrity, but not confidentiality. For confidentiality, encryption algorithms such as AES, DES, and RSA are used.

Question 10

PK enables secure communication between strangers.

Accepted Answer

PK (public key) cryptography enables secure communication between strangers by using a public key for encryption and a private key for decryption, which ensures that only the intended recipient can read the message.

Question 11

JCA provides by default a concrete implementation of the java.security package.

Accepted Answer

JCA (Java Cryptography Architecture) provides a framework and a set of APIs for cryptography, but it does not provide a concrete implementation of the java.security package by default. Implementations are typically provided by third-party providers or included in specific Java runtime environments.

Question 12

____ allow a user to control how encryption will work in a given cipher.
A) Padding
B) Modes
C) Message digests
D) MACs

Accepted Answer

Modes of encryption determine how the cipher will operate, such as how it handles the data size, how the input data is broken into blocks, and how the blocks are combined and transformed. Different modes have different strengths and weaknesses, and users can choose the mode that best fits their security requirements. Padding (A) adds extra bits to a message to reach a certain block size, while message digests (C) create a fixed-length hash of the input data to ensure data integrity. MACs (D) create a tag that can be used to verify the authenticity and integrity of a message. However, none of these options allow the user to control how encryption will work in a given cipher.

Question 13

A ____ is used to ensure the integrity of the message when the message is sent from one location to another.
A) certificate path
B) digital signature
C) digital certificate
D) message digest

Accepted Answer

A message digest is a cryptographic hash function output that ensures the integrity of a message by detecting any changes to the original message.

Question 14

____ cryptography enables exchange of secure messages between parties without prior arrangement to exchange keys.
A) Public key
B) Secret key
C) Symmetric
D) Private key

Accepted Answer

Public key cryptography, also known as asymmetric cryptography, enables secure message exchange without prior arrangement of exchanging keys because each party has a public key and a private key. The public key is shared with others, while the private key remains secret. Messages can be encrypted using the recipient's public key and only the recipient can decrypt it with their private key. This enables secure communication without the need for both parties to have the same secret key, as required in symmetric cryptography. Secret key and symmetric cryptography require a prior arrangement to exchange keys. Private key cryptography involves the use of a shared secret key.

Question 15

A(n) ____ refers to a set of packages that supply a concrete implementation of a subset of the cryptography functions used by the Security API.
A) provider
B) extensible access control
C) cryptographic service control
D) consumer

Accepted Answer

A provider refers to a set of packages that supply a concrete implementation of a subset of the cryptography functions used by the Security API.

Question 16

JCA includes a provider architecture that allows multiple and interoperable cryptography implementations.

Accepted Answer

JCA does indeed include a provider architecture that enables the use of various interoperable cryptography implementations.

Question 17

If randomness is needed to enhance security in generating a message digest, a key can be used as part of the message digest generation. This key using algorithm is known as a(n) ____.
A) HCRC
B) MD
C) MAC
D) CRC

Accepted Answer

MAC stands for Message Authentication Code and is a key-based algorithm used for message digest generation. HCRC (Hamming Code Checksum) and CRC (Cyclic Redundancy Check) are also algorithms used for error detection, but they do not use keys for randomness. MD (Message Digest) is a term used interchangeably with hash functions, which can use keys for added security, but not all hash functions do. Therefore, the best choice is C, MAC.

Question 18

____ API is a set of functions for building and validating a certification path.
A) java.security.cert
B) JSSE
C) CertPath
D) java.security

Accepted Answer

The CertPath API provides functions for building and validating certification paths, which are used to verify the authenticity of digital certificates. The java.security.cert and JSSE APIs are related to certificate management and SSL/TLS encryption, but do not specifically deal with certification paths. The java.security API is a general-purpose security framework that includes a variety of cryptographic and security-related classes, but again does not specifically focus on certification paths.

Question 19

____ is a data-encoding scheme that enables binary-encoded data to be converted to printable ASCII characters.
A) PKCS #8
B) PKCS #11
C) Base64
D) DER

Accepted Answer

Base64 is a data-encoding scheme that converts binary-encoded data into printable ASCII characters, making it easier to transmit over networks and store in text-based files. It is frequently used to encode data in internet email attachments, XML documents, and other contexts where binary data must be transmitted as text. PKCS #8 and PKCS #11 are cryptographic standards for private key encryption and token interfaces respectively, while DER is a binary format for encoding ASN.1 data structures.

Question 20

The ____ class provides the functionality of a message digest algorithm.
A) SHA-1
B) MessageDigest
C) java.CRC
D) java.security.MD5

Accepted Answer

The MessageDigest class in the java.security package provides the functionality of a message digest algorithm. The other classes mentioned, such as SHA-1, CRC, and MD5, are specific types of message digest algorithms, but they do not provide the overall functionality of digesting a message.

Quiz 6: Java Api-Level Security Features

The ____ package is composed of mostly abstract classes and interfaces that encapsulate security concepts to provide a configurable, fine-grained access-control security architecture.

____ implements Java technology version of secure sockets layer (SSL) and transport layer security (TLS) protocols.

A ____ is the instruction that describes the set of operations to be performed on the given input in order to produce the cryptographic output.

Before JDK 1.4, certification path validation was done implicitly in signature and signed JAR file verification.

____ is a block cipher mode in which every plaintext block encrypted with a block cipher is first exclusive-ORed with the previous ciphertext block.

The basic security in ____ comes from the fact it is relatively easy to multiply two huge prime numbers together to obtain their product, but it is computationally difficult to go the reverse direction.

____ is a block cipher mode in which each possible block of plaintext has a defined corresponding ciphertext value.

Java cryptography architecture ( JCA) is first introduced in ____.

Message digests such as MD2 and MD5 can ensure integrity and confidentiality of a message.

PK enables secure communication between strangers.

JCA provides by default a concrete implementation of the java.security package.

____ allow a user to control how encryption will work in a given cipher.

A ____ is used to ensure the integrity of the message when the message is sent from one location to another.

____ cryptography enables exchange of secure messages between parties without prior arrangement to exchange keys.

A(n) ____ refers to a set of packages that supply a concrete implementation of a subset of the cryptography functions used by the Security API.

JCA includes a provider architecture that allows multiple and interoperable cryptography implementations.

If randomness is needed to enhance security in generating a message digest, a key can be used as part of the message digest generation. This key using algorithm is known as a(n) ____.

____ API is a set of functions for building and validating a certification path.

____ is a data-encoding scheme that enables binary-encoded data to be converted to printable ASCII characters.

The ____ class provides the functionality of a message digest algorithm.