Big Data and Privacy

Which of the following most accurately describes Moore's Law:

• Moore's Law describes a relationship of boolean logic statements involving AND and OR

• Moore's Law is the principle that one should assume that any traffic on the Internet is insecure

• Moore's Law is the observation that computing power tends to double every two years

• Moore's Law explains why cracking modern cryptography is a "computationally hard" problem

Fill in the blank of the following statement: "______ encryption is a method of encryption involving one key for both encryption and decryption."

• Symmetric

• Asymmetric

• Public Key

• SSL

Pick the two expressions involving the Modulo operation that compute to the exact same value (choose 2)

• 9 MOD 8

• 1 MOD 16

• 52 MOD 32

• 9 MOD 64

A coffee shop is considering accepting orders and payments through their phone app and have decided to use public key encryption to encrypt their customers' credit card information. Is this a secure form of payment?

• No, public key encryption allows the credit card information to be read by the public.

• No, the internet protocols are open standards and thus everything sent over the internet is sent "in the clear".

• Yes, public key encryption is built upon computationally hard problems that even powerful computers cannot easily solve.

• Yes, public key encryption is secure because it transmits credit card information in binary.

Which of the following statements best describes the properties of public key encryption?

• Public key encryption is an encryption method which relies on separate keys for encrypting and decrypting information.

• Public key encryption is a highly secure encryption scheme that in which a single shared key is used by both the sender and receiver of the message.

• Public key encryption makes use of certain types of problems which are easier for humans to solve than computers.

• Public key encryption makes use of mathematical problems which no algorithm can be used to solve.

Choose the answer that is NOT a feature of Public Key Cryptography:

• A key for decrypting is never made public

• Using public key guarantees that only the intended recipient can decrypt the message

• A Public Key database ensures 3rd party accountability of security

• Allows secure communication without establishing a *shared* encryption key ahead of time.

A programmer is writing a system that is intended to be able to store large amounts of personal data. As the programmer develops the data system, which of the following is LEAST likely to impact the programmer's choices in designing the structure of the system?

• Maintaining privacy of the information stored in the data set.

• Scalability of the system.

• Structuring the metadata of the information for analysis.

• The frequency of a particular item occurring in a data set.

What is a Distributed Denial of Service (DDoS) attack?

• A coordinated effort by a group to simultaneously attempt to gain entry to foreign government's servers or systems

• An effort by network engineers to focus all systems on catching a user or computer that has illegally gained access.

• An attempt to compromise a single target by flooding it with requests from multiple systems.

• An attempt to harass or extort all customers of one or more Internet Service Providers (ISPs).

Which of the following scenarios is most characteristic of a phishing attack.

• You accidentally run a piece of code that automatically spreads from one computer to another, exploiting a common vulnerability

• You get an email from the IT support desk that asks you to send a reply email with your username and password to verify your account

• You get an unwanted email trying to sell you a low quality product or service that seems "fishy."

• You accidentally install a piece of software that monitors your activity to steal personal information like your passwords, date of birth, social security number, etc.

Which of the following are true statements about digital certificates in Web browsers?

I. Digital certificates are used to verify the ownership of encrypted keys used in secured communication

II. Digital certificates are used to verify that the connection to a Web site is fault tolerant.

• I only

• II only

• I and II

• Neither I nor II