014_Key Exchange - CompTIA Security+ SY0-701 - 1.4

What is the primary purpose of data at rest encryption?

• To encrypt data while it is being transmitted over a network.

• To encrypt data stored on devices such as SSDs and hard drives.

• To encrypt data in a database.

• To encrypt data using public algorithms.

Which of the following is an example of full disk encryption on Mac OS?

• BitLocker

• FileVault

• EFS

• TrueCrypt

Explain how column-level encryption can improve database performance compared to transparent encryption.

• Column-level encryption encrypts all data, reducing the need for decryption.

• Column-level encryption only encrypts sensitive columns, allowing non-sensitive data to remain in plain text, which speeds up searches.

• Column-level encryption uses asymmetric keys, which are faster than symmetric keys.

• Column-level encryption is not related to performance improvements.

Describe a scenario where data in transit encryption is crucial.

• When storing data on a local hard drive.

• When accessing a website over HTTPS to protect web traffic.

• When encrypting a database column.

• When using a symmetric key for file encryption.

What is the role of algorithm transparency in encryption?

• It ensures that encryption keys are kept secret.

• It makes encryption algorithms public, increasing trust in their robustness.

• It hides the encryption process from users.

• It allows for faster encryption and decryption processes.

Why is key secrecy more important than algorithm secrecy in encryption?

• Because knowing the algorithm does not help if the key is unknown.

• Because algorithms are always secret.

• Because keys are easier to guess than algorithms.

• Because algorithms are more complex than keys.

How does key length affect the security of an encryption system?

• Longer keys make encryption faster.

• Longer keys are more resistant to brute force attacks.

• Longer keys are less secure.

• Key length does not affect security.

What is the main advantage of using AES over DES?

• AES uses a shorter key length.

• AES is faster and more secure than DES.

• AES is easier to implement.

• AES is less complex than DES.

Discuss the trade-offs involved in choosing an encryption algorithm.

• Only security level matters.

• Considerations include security level, speed, and complexity of implementation.

• Only speed is important.

• Complexity of implementation is the only factor.

What is the purpose of key strengthening techniques?

• To make encryption keys shorter.

• To increase resistance to brute force attacks by adding computational overhead.

• To simplify the encryption process.

• To reduce the need for encryption keys.