9.24 Introduction to Cybersecurity Practice Test

What is the main difference between symmetric and asymmetric encryption?

• Symmetric uses numbers, asymmetric uses letters

• Symmetric uses the same key for encryption and decryption, asymmetric uses different keys

• Symmetric is faster, asymmetric is slower

• Symmetric works on computers, asymmetric works on phones

Answer explanation

The main difference is that symmetric encryption uses the same key for both encryption and decryption, while asymmetric encryption uses a pair of different keys (public and private) for these processes.

In public-key cryptography, you can safely share your public key with anyone without compromising security.

• True

• False

Answer explanation

True. In public-key cryptography, the public key can be shared openly without compromising security, as it is designed to be accessible to anyone while keeping the private key secure.

______ is any data that can be used to identify an individual, such as their name, address, or social security number.

• personally identifiable information

• public domain data

• aggregate statistics

• anonymous credentials

Answer explanation

The correct answer is 'personally identifiable information' (PII), which refers to any data that can identify an individual, such as their name, address, or social security number. The other options do not fit this definition.

What is the primary purpose of an SSL/TLS certificate?

• To speed up website loading times

• To verify a website's identity and establish secure connections

• To block unwanted advertisements

• To store user passwords

Answer explanation

The primary purpose of an SSL/TLS certificate is to verify a website's identity and establish secure connections, ensuring that data transmitted between the user and the site is encrypted and protected.

Companies collect personal data primarily to harm users and invade their privacy.

• True

• False

Answer explanation

Companies collect personal data mainly to improve services, enhance user experience, and for marketing purposes. While privacy concerns exist, the primary intent is not to harm users.

Which of the following is an example of a man-in-the-middle attack?

• Someone guessing your password

• Someone intercepting communications between two parties by impersonating one of them

• Someone sending you spam emails

• Someone creating a fake social media profile

Answer explanation

A man-in-the-middle attack occurs when someone intercepts communications between two parties, impersonating one of them. This matches the correct choice, as it directly describes the nature of such an attack.

A ______ is an algorithm used to change a message into an unreadable string of text for the purpose of verifying information.

• hash function

• sort algorithm

• compression method

• routing protocol

Answer explanation

A hash function is an algorithm that transforms a message into an unreadable string of text, ensuring data integrity by allowing verification of the original message without revealing its content.

When evaluating online sources for reliability, which domain extension is generally considered most trustworthy for factual information?

• .com

• .net

• .gov

• .org

Answer explanation

.gov domains are associated with government entities, making them generally the most reliable for factual information. In contrast, .com, .net, and .org can be used by anyone and may not always provide trustworthy content.

The Diffie-Hellman algorithm allows two parties to establish a shared secret key over an insecure communication channel.

• True

• False

Answer explanation

The Diffie-Hellman algorithm enables two parties to securely generate a shared secret key, even over an insecure channel, by using mathematical principles. Therefore, the statement is True.

________ is having the ability to find information, evaluate information credibility, and use information effectively.

• information literacy

• digital marketing

• data entry

• creative writing

Answer explanation

Information literacy is the ability to locate, assess the credibility of, and effectively use information. This skill is essential in today's information-rich environment, making it the correct choice.