Key Exchange - CompTIA Security+ SY0-701 - 1.4

Discuss the trade-offs involved in choosing an encryption algorithm.

• Security level, speed, and complexity of implementation.

• Cost of the algorithm, user interface design, and hardware requirements.

• Popularity of the algorithm, number of users, and vendor support.

• Legal compliance, marketing strategy, and user feedback.

What is the primary purpose of data at rest encryption?

• To encrypt data stored on devices such as SSDs and hard drives.

• To protect data during transmission over networks.

• To ensure data is backed up in the cloud securely.

• To delete unnecessary files from storage devices.

Which of the following is an example of full disk encryption on Mac OS?

• BitLocker

• FileVault

• EFS

• TrueCrypt

How does key length affect the security of an encryption system?

• Longer keys are more resistant to brute force attacks.

• Shorter keys are more secure because they are easier to manage.

• Key length has no effect on security; only the algorithm matters.

• Longer keys slow down the encryption process significantly.

What is the main advantage of using AES over DES?

• AES is faster and more secure than DES.

• AES is easier to implement than DES.

• AES uses a smaller key size than DES.

• AES is less widely used than DES.

Explain how column-level encryption can improve database performance compared to transparent encryption.

• Column-level encryption encrypts all data in the database, which enhances security but slows down performance.

• Column-level encryption only encrypts sensitive columns, allowing non-sensitive data to remain in plain text, which speeds up searches.

• Column-level encryption requires more resources than transparent encryption, leading to slower performance.

• Column-level encryption is only effective for small databases and does not improve performance for larger datasets.

Describe a scenario where data in transit encryption is crucial.

• When accessing a website over HTTPS to protect web traffic.

• When storing data on a local hard drive without encryption.

• When sending an email without any security measures.

• When using a public Wi-Fi network without a VPN.

How does brute force attack resistance relate to key length in encryption?

• Shorter keys are more resistant to brute force attacks.

• Longer keys are more resistant to brute force attacks.

• Key length has no effect on brute force attack resistance.

• Brute force attacks are only effective against weak encryption algorithms.

How does a VPN protect data in transit?

• By creating an encrypted tunnel for secure communication.

• By using a firewall to block unauthorized access.

• By compressing data to speed up transmission.

• By routing traffic through multiple servers for anonymity.

What is the difference between full disk encryption and file-level encryption?

• Full disk encryption encrypts the entire storage device, while file-level encryption encrypts individual files or folders.

• Full disk encryption is faster than file-level encryption.

• File-level encryption is more secure than full disk encryption.

• Full disk encryption only works on external drives.