Information Security Careers and Certifications - Module 3

Module 3 Question: Aaliyah wants to send a message to a friend, but she does not want anyone else to know that she is communicating with them. Which technique would she use? a. cryptography b. steganography c. encryption d. ciphering Answers: b Question: Zeinab has been asked by her supervisor to speak with an angry customer who claims that they never received notification of a change in the terms of service agreement. Zeinab learned that an automated "read receipt" was received, showing that the customer opened the email with the new terms of service outlined. What action will Zeinab now take regarding this customer? a. repudiation b. obfuscation c. integrity d. nonrepudiation Answers: d Question: Which of the following is NOT a form of obfuscation? a. tokenization b. ciphering c. steganography d. data masking Answers: b Question: Which of the following is NOT correct about "security through obscurity"? a. It attempts to hide its existence from outsiders. b. Proprietary cryptographic algorithms are a common example. c. It is essentially impossible to achieve. d. It should only be used as a general information security protection in extreme circumstances. Answers: d Question: Layla has encrypted a document so that it can only be viewed by those who have been provided the key. What protection has she given to this document? a. confidentiality b. integrity c. authentication d. obfuscation Answers: a Question: Which of the following is NOT correct about a one-time pad (OTP)? a. It combines plaintext with a random key. b. The recipient must have a copy of the pad to decrypt the message. c. It was used during the Cold War. d. It requires a cipher disk. Answers: d Question: What is data called that is to be encrypted by inputting it into a cryptographic algorithm? a. plaintext b. byte-text c. cleartext d. ciphertext Answers: a Question: Which of the following creates the most secure ciphertext? a. redundant function b. stream cipher c. block cipher d. sponge function Answers: d Question: Karyme needs to select a hash algorithm that will produce the longest and most secure digest. Which would she choose? a. RipeMD160 b. SHA-256 c. XRA3-512 d. Whirlpool Answers: d Question: Which algorithm uses the same key to both encrypt and decrypt data? a. asymmetric cryptographic algorithm b. hashing algorithm c. pairwise keypair algorithm d. symmetric cryptographic algorithm Answers: d Question: Which of the following is NOT to be decrypted but is only used for comparison purposes? a. Digest b. Key c. Stream d. Algorithm Answers: a Question: Which of these is NOT a characteristic of a secure hash algorithm? a. Collisions may occur but they should be rare. b. A message cannot be produced from a predefined hash. c. The hash should always be the same fixed size. d. The results of a hash function should not be reversed. Answers: a Question: Which of the following is a weakness of RSA? a. RSA weaknesses are based on ECC. b. RSA has no known weaknesses. c. As computers become more powerful, the ability to compute factoring has increased. d. The digest produced by the RSA algorithm is too short to be secure. Answers: c Question: Which of these is NOT true about ECC? a. ECC has gained wide popularity. b. All modern OSs and web browsers use ECC. c. ECC security is comparable to other asymmetric cryptography but has smaller key sizes. d. It uses both sloping curves and prime numbers. Answers: d (ECC uses slopping curves while RSA use large prime number Question: If Bob wants to send a secure message to Alice using an asymmetric cryptographic algorithm, which key does he use to encrypt the message? a. Alice's private key b. Alice's public key c. Bob's public key d. Bob's private key Answers: b Question: Farah needs to encrypt only a few files and does not want the entire disk contents to be encrypted. What type of encryption would she use? a. file-level encryption b. byte-level encryption c. folder-level encryption d. device-level encryption Answers: a Question: Which type of encryption would protect all data on a hard drive, including the installed OS? a. FDE b. SSED c. TXPM d. HRHS Answers: a Question: What is a collision? a. Two files that produce the same digest. b. Two ciphertexts that have the same length. c. Two algorithms that have the same key. d. Two keys that are the same length. Answers: a Question: Nahla has been asked to make a recommendation about the most secure TEE. Which of the following would she choose? a. SED b. HSM c. TPM d. ARC Answers: c Question: Which type of blockchain can anyone join? a. Federated blockchain b. Private blockchain c. Hybrid blockchain d. Public blockchain Answers: d Question: An employee tries to mask his identity by programmatically changing the From field to "a-nony-mouse" in an email. He uses periodic intervals to send the email to the entire company promoting a product he is selling online. An investigation reveals who sent the message. What capability of cryptography was used to confirm the sender's identity? a. b. c. d. Metadata Obfuscation Repudiation Nonrepudiation Answers: d Question: How does Blockchain use cryptography to ensure the integrity of data? a. b. c. d. It It It It uses uses uses uses cryptographic hash algorithms to encrypt transactions. cryptographic hash algorithms to record transactions. symmetric cryptographic algorithms to record transactions. asymmetric cryptographic algorithms to record transactions. Answers: b Question: Which key combination would the recipient of a message use to confirm the integrity of the message as well as the authenticity of the sender ? a. b. c. d. The The The The sender's sender's sender's sender's public key and the recipient's private key public key and the recipient's public key private key and the recipient's public key private key and the recipient's private key Answers: d Question: Adelli sends an image file containing a secret message to her sister as an attachment. Adelli gives her sister instructions over the phone on how to read the message. The sister follows the instructions and reads the message. Which of the following techniques did Adelli use? a. b. c. d. Hashing Stenography Encryption Steganography Answers: d Question: Quinto wants to set up an encrypted folder on his computer running Microsoft Windows. Which of the following is Quinto most likely to use? a . GnuPG b . EFS c . TDE d . FDE e . FileVault Answers: b Question: Which of the following statements properly expresses the characteristics of AES and Blowfish? Select three. a. b. c. d. e. f. AES and Blowfish use private key cryptography. Blowfish operates on 6 4 - bit blocks. AES is capable of using a 2 5 6 - bit key. Blowfish uses the 3 DES cipher. Blowfish is capable of using a 5 1 2 - bit key. AES is a stream cipher while Blowfish is a block cipher Answers: a, b, c Question: Barrabi mined Bitcoin years ago that is now worth millions of dollars. He encrypted the password but can't remember the key he used to encrypt it. Upon employing the services of Barnum, a skilled security professional, he was eventually able to determine the key. Which of the following best explains what Barnum did or used to determine the key? a. b. c. d. He He He He performed a cyphertext attack. used a reverse hashing algorithm. used a quantum computer. performed a collision attack. Answers: a Question: Cadence will attempt to find two different sets of input text that will yield the same hash when using MD5. What type of attack is Cadence most likely to perform? a. b. c. d. e. Birthday paradox Plaintext attack Collision attack Downgrade attack Misconfiguration attack Answers: c Question: answered Bodhi is leading a team responsible for writing the specifications of a new hashing algorithm. What factor does the team need to keep in mind to ensure it is secure? 1) The output should always be of a fixed size. 2) Every unique input should render unique output. 3) The output should be original. 4) It should include private key encryption capabilities. 5) Encryption and decryption should use the same key. Answers: 1,2, 3 Question: A company is exploring a variety of symmetric key algorithms to use in an app. Which of the following statements best describes a possible concern? a. b. c. d. The key must be kept private. Both the encryption and decryption keys must be kept private. If the public key encrypts, it should not be able to decrypt. The private and public keys must be kept secret/secure Answers: a