CASP: Chapter 10A

Data Protection: Which of the following encryption methods would be most appropriate for protecting data stored on a removable disk?

• IPSec

• AES

• TLS

• RSA

Strong Authentication Device: What device is used to provide strong authentication by storing a user's digital certificate, associated private key, and requiring a personal identification number (PIN)?

• HSM (Hardware Security Module)

• Smart card

• USB token

• TPM (Trusted Platform Module)

Role of Device Certificates: How do device certificates contribute to security operations?

• They authenticate users during logon processes.

• They provide secure access to network resources.

• They identify authorized endpoints for secure communication.

• They encrypt data in transit.

Bridge CA: What is the purpose of a bridge CA in a Public Key Infrastructure (PKI)?

• To issue digital certificates for end-users.

• To manage revocation lists for expired certificates.

• To facilitate secure communication between network devices.

• To enable interoperability and shared trust between multiple independent PKIs.

PKI Functionality: Which of the following statements accurately describes a function of Public Key Infrastructure (PKI)?

• PKI encrypts messages using symmetric encryption keys.

• PKI manages public/private keys, ensures integrity through digital signatures, and provides authentication through private key encryption.

• PKI generates digital signatures using public keys.

• PKI distributes encryption keys over untrusted connections.

Secure Communication: How does PKI enable secure communication over untrusted connections?

• By using digital signatures to verify message integrity.

• By distributing private keys to all communication endpoints.

• By encrypting messages with symmetric encryption keys.

• By centralizing digital certificate standards and cryptographic services.

Code Signing Purpose: What is the primary purpose of code signing using a code signing certificate from a trusted Certificate Authority (CA)?

• To verify the integrity of boot firmware and software in devices.

• To decrypt encrypted data stored in persistent storage.

• To validate the authenticity and source of software by providing proof of origin.

• To encrypt applications and drivers for secure transmission over the internet.

Data Protection Method: Which method is commonly used to protect data stored in persistent storage, such as financial information in databases or archived media?

• Secure transmission using TLS.

• Whole disk encryption or file-level encryption.

• Digital signatures using ECDSA.

• Symmetric encryption using IPSec.

Data Protection Protocol: Which protocol is commonly used to protect data being transmitted over a network, such as website traffic or remote access data?

• HTTP

• IPSec

• ECDSA

• SSH

Data Security Mechanism: What mechanism is used to encrypt data present in volatile memory, such as documents open in applications or database data being modified, to prevent unauthorized access by untrusted processes?

• VPN encryption

• Trusted execution environment (TEE) mechanisms like Intel Software Guard Extensions

• TLS encryption

• Whole disk encryption