Question 1

When an attacker has access to a password file,they can run a password-cracking program that uses a dictionary of known words or passwords as an input file.What type of attack is this attacker performing?

Accepted Answer

The attacker is performing a dictionary attack, where they use a dictionary file containing known words or passwords as input to crack the passwords in the password file. A brute force attack would involve trying every possible combination of characters to guess the password, while a replay attack involves intercepting and reusing valid authentication credentials. A ciphertext-only attack attempts to decrypt ciphertext without any knowledge of the encryption algorithm or key.

Question 2

Which of the following is a scripting language for Windows and Linux that performs repetitive tasks,such as password cracking?

Accepted Answer

EXPECT is a scripting language that can automate repetitive tasks, including password cracking. John the Ripper, Hydra, and Pwdump3v2 are password cracking tools, but not scripting languages.

Question 3

How can confidentiality and authentication be achieved using public key cryptography?

Accepted Answer

The answer of How can confidentiality and authentication be achieved...

Question 4

A certificate contains a unique serial number and must follow which standard that describes the creating of a certificate?

Accepted Answer

The X.509 standard defines the structure and format of public key certificates, including the unique serial number.

Question 5

What application is considered the original password-cracking program and is now used by many government agencies to test for password strength?

Accepted Answer

L0phtcrack is considered the original password-cracking program and is now used by many government agencies to test for password strength. John the Ripper, Hydra (THC), and Pwdump3v2 are also password-cracking programs, but they are not considered the original program.

Question 6

What is an encryption algorithm?

Accepted Answer

The answer of What is an encryption algorithm?...

Question 7

In what type of attack does the attacker have the ciphertext of several messages that were encrypted with the same encryption algorithm,but has no access to the plaintext so he or she must try to calculate the key used to encrypt the data?

Accepted Answer

This scenario describes a ciphertext-only attack, where the attacker only has access to the encrypted messages and not the plaintext or any other information about the encryption process. The attacker must rely on cryptanalysis techniques to try and deduce the key used to encrypt the messages.

Question 8

What is the difference between a public key and a private key?

Accepted Answer

The answer of What is the difference between a public...

Question 9

What is a one-way function? Provide an example or an analogy to help explain the concept.

Accepted Answer

The answer of What is a one-way function? Provide an...

Question 10

What type of attack is being conducted when the attacker has messages in both encrypted form and decrypted forms?

Accepted Answer

This is a known plaintext attack. In this type of attack, the attacker has access to both encrypted and decrypted messages, allowing them to look for patterns and determine the encryption key. This type of attack is more effective than a ciphertext-only attack, but less effective than a chosen-plaintext or chosen-ciphertext attack.

Question 11

What type of attack is being attempted when an attacker uses a password-cracking program to guess passwords by attempting every possible combination of letters?

Accepted Answer

Brute force attacks are designed to guess passwords by trying every possible combination of letters, numbers, and symbols until the correct password is discovered. In this case, the attacker is using a password-cracking program to attempt every possible combination of letters, making it a brute force attack. Replay attacks involve intercepting and reusing network traffic, ciphertext-only attacks involve attempting to decrypt ciphertext without any knowledge of the encryption algorithm or key, and dictionary attacks involve using a pre-existing list of commonly used passwords to attempt to guess the correct password.

Question 12

What is Triple Data Encryption Standard (3DES)?

Accepted Answer

The answer of What is Triple Data Encryption Standard (3DES)?...

Question 13

What type of attack is being performed when the attacker has access to plaintext and ciphertext,and can choose which messages to encrypt?

Accepted Answer

This type of attack is known as a chosen-plaintext attack, as the attacker has the ability to choose which messages to encrypt. This can be particularly dangerous as it allows the attacker to potentially gather intelligence about the encryption algorithm or keys being used.

Question 14

What is a digital signature?

Accepted Answer

The answer of What is a digital signature?...

Question 15

What type of attack is being performed when an attacker intercepts the initial communications between a Web server and a Web browser while forcing a vulnerable server to insecurely renegotiate the encryption being used down to a weaker cipher?

Accepted Answer

This is an SSL/TLS downgrade attack, where the attacker intercepts initial communications and forces the encryption to be downgraded to a weaker cipher. This leaves the connection vulnerable to further attacks, such as man-in-the-middle attacks. The other options listed are not relevant to this specific attack scenario.

Question 16

In what type of attack does the attacker need access to the cryptosystem,and the ciphertext to be decrypted to yield the desired plaintext results?

Accepted Answer

In a chosen-ciphertext attack, the attacker has access to the cryptosystem and can choose ciphertexts to be decrypted, allowing them to analyze the decrypted plaintexts to find vulnerabilities or the decryption key.

Question 17

What is cryptanalysis?

Accepted Answer

The answer of What is cryptanalysis?...

Question 18

How does public key infrastructure work?

Accepted Answer

The answer of How does public key infrastructure work?...

Question 19

What is the RC5 algorithm?

Accepted Answer

The answer of What is the RC5 algorithm?...

Question 20

What is a certificate?

Accepted Answer

The answer of What is a certificate?...

Quiz 12: Cryptography