Chapter 5 Quiz

A user plans to use SHA-1 as part of an IPSec implementation for inbound external connections. The user wants to ensure the integrity and authenticity of the connection. What security tool can the user use?

• Message Digest 5 (MD5) Algorithm

• Hash-based message authentication code (HMAC)

• Internet Security Association and Key Management Protocol (ISAKMP)

• Secure Hash Algorithm SHA-256 (256 bit)

Alice and Bob use the same password to login into a website. This means both would have the exact same hash for their passwords. What could be implemented to prevent both password hashes from being the same?

• hashing

• salting, salt

• Secure Hash Algorithm (SHA)

• Message Digest 5 (MD5) Algorithm

Which method tries all possible passwords until a match is found?

• dictionary

• brute force

• rainbow tables

• trial-and-error method

A user downloads an updated driver for a video card from a website. A warning message pops up saying the driver is not approved. What does this piece of software lack?

• valid ID

• source code

• digital signature

• code recognition

Write down one criteria used for validation rule.

• range

• format

• size

• consistency

• check digit

A user wants to ensure that when new users downloaded his newly created program, the program is not changed while in transit. What can the user do to ensure that the program is not changed when downloaded?

• Distribute the program on a thumb drive.

• Install the program on individual computers.

• Encrypt the program and require a password after it is downloaded.

• Create a hash of the program file and use it to verify the integrity of the file after download

What is the standard for a public key infrastructure to manage digital certificates?

• public key infrastructure (PKI)

• x.503

• NIST-SP800

• x.509

A recent breach at a company due to the ability of a hacker to access the corporate database through the company website by using malformed data in the login form. What is the problem with the company website?

• weak encryption

• bad usernames

• poor input validation

• lack of operating system patching

What is a strength of using a hashing function?

• It has a variable length output.

• It can take only a fixed length message.

• It is a one-way function and not reversible.

• Two different files can be created that have the same output.

For integrity rule that states every table must have a primary key and that the column or columns chosen to be the primary key must be unique and not null. Which integrity requirement is this?

• entity integrity

• Domain Integrity

• Referential Integrity

• User-defined Integrity