Chapter 4 on Cryptography and Security

Which asymmetric algorithm provides an electronic key exchange method to share the secret key?

• RSA

• Diffie-Hellman

• WEP

• DES

• hashing

Answer explanation

The Diffie-Hellman algorithm is specifically designed for secure key exchange, allowing two parties to generate a shared secret over an insecure channel. RSA is for encryption, while WEP and DES are not asymmetric algorithms.

What encryption algorithm uses one key to encrypt data and a different key to decrypt data?

• transposition

• symmetric

• asymmetric

• one-time pad

Answer explanation

The correct answer is 'asymmetric' because this encryption algorithm uses a pair of keys: one for encryption and a different one for decryption, unlike symmetric algorithms which use the same key for both processes.

What type of cipher encrypts plaintext one byte or one bit at a time?

• block

• stream

• hash

• enigma

• elliptical

Answer explanation

A stream cipher encrypts plaintext one byte or one bit at a time, making it suitable for real-time data transmission. In contrast, block ciphers encrypt fixed-size blocks of data, which is why 'stream' is the correct answer.

What cryptographic algorithm is used by the NSA and includes the use of elliptical curves for digital signature generation and key exchange?

• ECC

• RSA

• AES

• El-Gamal

• IDEA

Answer explanation

ECC, or Elliptic Curve Cryptography, is the algorithm used by the NSA for digital signatures and key exchange, leveraging the mathematical properties of elliptic curves for enhanced security and efficiency.

What is the term used to describe the science of making and breaking secret codes?

• factorization

• cryptology

• impersonation

• spoofing

• jamming

Answer explanation

The science of making and breaking secret codes is known as cryptology. It encompasses both cryptography (creating codes) and cryptanalysis (breaking codes), making it the correct term for this field.

Which three processes are examples of logical access controls? (Choose three.)

• intrusion detection system (IDS) to watch for suspicious network activity

• firewalls to monitor traffic

• fences to protect the perimeter of a building

• biometrics to validate physical characteristics

• guards to monitor security screens

What term is used to describe concealing data in another file such as a graphic, audio, or other text file?

• masking

• hiding

• obfuscation

• steganography

What are three examples of administrative access controls? (Choose three.)

• hiring practices

• encryption

• intrusion detection system (IDS)

• background checks

• policies and procedures

Which three protocols use asymmetric key algorithms? (Choose three.)

• Telnet

• Secure Shell (SSH)

• Pretty Good Privacy (PGP)

• Secure File Transfer Protocol (SFTP)

• Secure Sockets Layer (SSL)

A warning banner that lists the negative outcomes of breaking company policy is displayed each time a computer user logs in to the machine. What type of access control is implemented?

• masking

• deterrent

• detective

• preventive