Network Security Domain 2: Encryption

Multiple Choice

Encryption mainly supports which pillar of the CIA triad?

• Confidentiality
• Authentication
• Availability
• Integrity

​EFS - Encrypting Online Files

Multiple Choice

What tool can be used to encrypt online files in Windows?

• EFS

• Sync Center

• Windows Defender

• Active Directory

• Applocker

Multiple Choice

Review question: What tool can be used to encrypt offline files in Windows?

• EFS

• Sync Center

• Windows Defender

• Active Directory

• Applocker

Multiple Select

What can EFS be used to encrypt? Choose any answers that apply

• Files

• Drives

• E-mail

• Folders

• Apps

Multiple Choice

Using EFS, you can choose to encrypt the contents of file or compress them, but NOT both.

• True

• False

Multiple Choice

Generally, In what color will encrypted files show up as? [EFS 2]

• Blue

• Black

• Green

• Yellow

• Red

Multiple Choice

Generally speaking, when you are copying/pasting a folder or moving a folder, it should keep its encryption characteristics.

• True

• False

Multiple Choice

EFS does not prevent other users signing onto the same machine from accessing encrypted content.

• True

• False

Multiple Choice

The only difference between Bitlocker and Bitlocker to Go, is that Bitlocker To Go is used for __________ drives.

• hard

• solid state

• internal

• removable

• SATA

Multiple Choice

Encryption can be hardware based or software based.

• True

• False

Multiple Choice

Which choice is a hardware-based encryption tool?

• SSL

• TPM

• TLS

• EFS

Multiple Choice

What is the Trusted Platform Module (TPM)?

• A software application that manages user passwords and other authentication features

• A cloud-based storage solution for sensitive data used in high-security environments

• A type of network security protocol.
• A hardware security module that integrates secure cryptographic functions into devices

Multiple Choice

SSL uses a public and private key for encryption.

• True

• False

Multiple Choice

Digital signatures mainly support which pillar of the CIA triad?

• Integrity
• Accounting

• Availability
• Confidentiality

Multiple Select

What are two encryption protocols used for email? (Choose 2)

• SFTP

• PGP

• S/MIME

• TCP

• EFS

Multiple Choice

In addition to a public key and private key, PGP uses a _____________ key to encrypt and decrypt messages.

• session

• message

• cypher

• crypto

• backdoor

Multiple Choice

Which cryptographic protocol is used by many web browsers and email providers including Microsoft exchange to embed objects for encryption purposes?

• SSH
• S/MIME
• TLS
• PGP
• SMTP

Multiple Choice

Which law regulates the storage and handling of patients health data?

• HITECH
• GDPR
• FERPA
• HIPAA
• PCI-DSS

Multiple Choice

Which law regulates the storage of credit card data in the United States?

• PCI DSS

• ECPA

• HIPAA

• FTCA

Multiple Choice

Closing unused chat windows can help prevent what type of attacks?

• Man in the Middle Attacks

• Phishing attacks
• Malware installation attacks
• SQL Injection Attacks

Multiple Choice

Employees should get approval before posting to the Company's social media site.

• True

• False

​XX

​443

Multiple Choice

A VPN encrypts all traffic.

• True

• False

Multiple Choice

What is a VPN?

• A VPN is a type of antivirus software.
• A VPN is a hardware device that boosts Wi-Fi signal.
• A VPN is a social media platform for networking.
• A VPN is a service that provides a private connection over a public network.

Match

Match the tunneling protocol to the best description.

• Industry Standard. Uses IPsec

• Uses IPsec. Supports VPN Reconnect

• Old standard. Weak encryption.

• Uses HTTPS over TCP Port 443

L2TP

IKEv2

PPTP

SSTP

• L2TP

• IKEv2

• PPTP

• SSTP

Multiple Choice

Review Question: Why doesn't VPN use HTTP?

• VPN uses HTTP for encryption purposes.
• HTTP is faster than VPN protocols.
• VPN is designed specifically for web browsing.
• HTTP is not encrypted.

Multiple Choice

Review Question: What is the common port number for HTTP?

• 143

• 21
• 80
• 443
• 3389

Multiple Choice

Which network protocol is the industry standard for VPN tunneling?

• L2TP
• PPTP
• SSTP

• IKEv2

Multiple Choice

Which VPN authentication form is not considered secure?

• CHAP

• PAP

• MS-CHAPv2

• EAP-MS-CHAPv2

Multiple Choice

Review Question: Why is PAP considered unsecure?

• PAP is unsecure because it transmits in plaintext.

• PAP is insecure because it uses encryption.

• PAP requires a strong password policy to be secure.
• PAP is secure due to its use of digital certificates.

Multiple Choice

Which hashing protocol does CHAP use?

• MD5
• SHA-256
• bcrypt
• SHA-1
• MD4

Multiple Choice

Which VPN authentication form can use biometrics?

• CHAP

• MS-CHAPv2

• EAS-MS-CHAPv2

• PAP

• Often used at the beginning of a data transmission

• To continue the e-commerce website, example, the website would store the private key on the web server. Only the we server can decrypt the data.

​Private Keys

• Often used at the beginning of a data transmission to encrypt data.

• ​For example, on an e-commerce website, a public key would be sent by a web server to initiate a transaction

​Public Keys

Public and Private Keys

Multiple Choice

Which type of key is usually used to decrypt data?

• Public key
• Private key

• Backdoor Key

• Hash key

Multiple Choice

Why type of key would be sent to an e-commerce website's server to initiate a transaction?

• A penthouse key

• A backdoor key

• A public key

• A private key

• One key encrypts while another key decrypts

• A hash function is the result of one-way encryption that is NOT meant to be deciphered.

  • MD4, MD5

  • SHA1, SHA256

​Asymmetric Encryption

• The same key is used to encrypt and decrypt the data

• Block ciphers adds an encryption key to a block of plaintext to scramble the data into a block of cipher text.

• Stream ciphers use bit-by-bit encryption

Symmetric Encryption

Symmetric Encryption

​Secure Shell (SSH) uses both symmetric and asymmetric encryption.

Multiple Choice

What is the main difference between symmetric and asymmetric encryption?

• Symmetric encryption is used for digital signatures, while asymmetric is for data encryption.
• Asymmetric encryption is faster than symmetric encryption in all cases.
• Symmetric encryption uses a single key, whereas asymmetric encryption uses a key pair.

• Symmetric encryption uses multiple keys, while asymmetric uses one key.

Multiple Choice

Which of the following is an example of stream cipher?

• AES
• DES
• Blowfish
• RC4

Multiple Choice

Which of the following is a form of symmtric encryption

• PGP

• TSL

• DES

• SSL

Multiple Choice

Which is an example of one-way encryption protocol?

• SHA-256
• DES

• PGP

• SSL

Multiple Choice

Which type of symmetric encryption can encrypt in 128, 192, or 256 bit?

• DES (Data Encryption Standard)
• AES (Advanced Encryption Standard)
• RC4 (Rivest Cipher 4)
• Blowfish

Multiple Choice

Review Question: What is PGP used to encrypt?

• Applications

• Social media posts
• Emails

• Text messages

Multiple Choice

Review Question: What are hash functions used to encrypt?

• passwords

• images

• videos

• video files

• websites

Digital Certificates

​Used to store public keys and Information

• users

• organizations

• serial numbers

• expiration numbers

Multiple Choice

What is the only certificate format that can export a certificate and a private key?

• PKCS#12
• PFX
• DER
• PEM
• PKCS#7

Multiple Choice

Which certificate format is also known as encoded binary X.509?

• DER
• PKCS#7

• PKCS#12
• Base-64

Certificate Services and PKI

• Certificate Authorities

  • issue digital certificates

  • Windows server can be a CA for internal network sites.

  • Enterprise Root CA is at the top of the CA hierarchy

  • Stand-alone CA - Do not use Active Directory and do not automatically enroll visitors.

    
    

• ​PKI (public key infrastructure)

  • A digital certificate system used to Create, Manage, Distribute, Use, Store, and Revoke certificates

​Certificates

Multiple Choice

How can you find the certificate for a website?

• Click the padlock icon in the browser's address bar

• Contact the website owner for certificate details.
• Look for a certificate in the website's source code.
• Check the website's footer for a certificate link.

Match

Match the following

• Issues digital certificates

• Used to distribute keys

• Verifies the identity of users

• Maintains a list of revoked certificates

CA (certificate authority)

RA (registration authority)

Identity provider

CRL (certificate revocation list)

• CA (certificate authority)

• RA (registration authority)

• Identity provider

• CRL (certificate revocation list)

Multiple Choice

A security token would fall under which authentication category?

• Something you have
• Something you do
• Something you are
• Something you know

Multiple Choice

A security token can be software of hardware based.

• True

• False

Multiple Choice

Which is NOT an example of authentication using a security token?

• Entering a username and password

• A text message sent to your phone by your bank with a temporary code

• Entering a number sent to an app on your cellphone

• Entering a code from a physical device issued to the user

Multiple Choice

What is a common Windows tool used to lockdown devices?

• Device Manager
• Control Panel
• Task Manager
• Device Guard

Multiple Choice

Review Question: Code integrity checks like those used by Device Guard can be isolated from the Windows Kernel. What type of malware can affect the kernel?

• Rootkits
• Viruses
• Trojans

• Worms
• Logic Bombs