APCSP IOC-2.B Cybersecurity and Encryption

What is the primary purpose of implementing authentication measures like strong passwords and MFA?

• To speed up device performance.

• To protect devices and information from unauthorized access.

• To encrypt data during transmission.

• To ensure regular software updates are installed.

Which of the following passwords best fits the description of a "strong password" (easy for the user to remember, difficult for others to guess based on knowledge of the user)?

• password123

• The user's own street name (mapleStreet)

• A random string like X7$gP@!zQw (potentially hard for the user to remember)

• An unusual phrase known only to the user like 3PurpleElephantsFly@Midnight!

Multifactor Authentication (MFA) requires evidence from typically at least two of three categories. Which of the following correctly lists these three categories?

• Knowledge (know), Possession (have), Inherence (are)

• Location (where), Time (when), Action (do)

• Public Key (encrypt), Private Key (decrypt), Symmetric Key (both)

• Hardware (physical), Software (program), Network (connection)

A user logs into their bank account by entering a password and then entering a code sent to their registered mobile phone. How does this process align with the definition of MFA?

• It uses only one factor (knowledge - the password).

• It successfully uses two factors: knowledge (password) and possession (phone).

• It uses two factors: knowledge (password) and inherence (fingerprint).

• It is not MFA because it only involves two steps.

How does Multifactor Authentication enhance security compared to using only a strong password?

• It makes the password itself harder to guess.

• It encrypts the password during transmission.

• It adds at least one additional layer of security that must be compromised.

• It automatically updates the user's password regularly.

What is the fundamental difference between encryption and decryption?

• Encryption encodes data to prevent unauthorized access; decryption decodes it.

• Encryption uses public keys; decryption uses private keys.

• Encryption protects data at rest; decryption protects data in transit.

• Encryption requires MFA; decryption does not.

In symmetric key encryption, how many keys are required for secure communication between two parties (Alice and Bob)?

• One shared key used by both Alice and Bob.

• Two keys: Alice's public key and Bob's private key.

• Two keys: Alice's private key and Bob's public key.

• Four keys: A public/private pair for Alice and a public/private pair for Bob.

Alice wants to send a message to Bob using public key encryption. Which key does Alice use to encrypt the message so that only Bob can decrypt it?

• Alice's private key

• Alice's public key

• Bob's private key

• Bob's public key

Alice wants to send a message to Bob using public key encryption. Which key does Bob use to decrypt the message received from Alice?

• Alice's private key

• Alice's public key

• Bob's private key

• Bob's public key

What is the primary role of a Certificate Authority (CA) in the context of secure communications?

• To generate strong passwords for users.

• To issue digital certificates validating the ownership of encryption keys.

• To perform malware scans on network traffic.

• To directly encrypt and decrypt user data.