wayground logo

Free Printable Worksheets

NEW

Font size

S
M
L
XL
Worksheets

SEC+ Ch.10 Review Test

Total questions: 15

Worksheet time: 8mins

Name
Class
Date
1.

GCGA, a software development company, occasionally updates its software with major updates and minor patches. Administrators load these updates to the company web site along with a hash associated with each update. Which of the following BEST describes the purpose of the hash?

a)

Availability of updates and patches

b)

Integrity of updates and patches

c)

Confidentiality of updates and patches

d)

Integrity of the application

2.

Users in your organization sign their emails with digital signatures.

Which of the following provides integrity for these digital signatures?

a)

Hashing

b)

Encryption

c)

Non-repudiation

d)

Private key

3.

While reviewing logs on a web server hosted by your organization, you notice multiple logon failures to an FTP account, but they’re only happening about once every 30 minutes. You also see that the same password is being tried against the SSH account right after the FTP account logon failure. What BEST describes what is happening?

a)

Brute force attack

b)

Dictionary attack

c)

Plaintext attack

d)

Spraying attack

4.

An online application requires users to log on with their email address and a password. The application encrypts the passwords in a hashed format. Which of the following can be added to decrease the likelihood that attackers can discover these passwords?

a)

Rainbow tables

b)

Salt

c)

Digital signatures

d)

Input validation

5.

What is the primary difference between a block cipher and a stream cipher?

a)

A stream cipher encrypts data 1 bit or 1 byte at a time.

b)

A block cipher encrypts data 1 bit or 1 byte at a time.

c)

Stream ciphers are used for symmetric encryption, but block ciphersare used for asymmetric encryption.

d)

Block ciphers are used for symmetric encryption, but stream ciphersare used for asymmetric encryption.

6.

A developer is creating an application that will encrypt and decrypt data on mobile devices. These devices don’t have a lot of processing power. Which of the following cryptographic methods has the LEAST overhead and can provide encryption for these mobile devices?

a)

Elliptic curve cryptography

b)

Perfect forward secrecy

c)

Salting

d)

Digital signatures

7.

You are configuring a web server that will be used by salespeople via the Internet. Data transferred to and from the server needs to be encrypted, so you are tasked with requesting a certificate for the server. Which of the following would you MOST likely use to request the certificate?

a)

CA

b)

CRL

c)

CSR

d)

OCSP

8.

Users within an organization frequently access public web servers using HTTPS. Management wants to ensure that users can verify that certificates are valid even if the public CAs are temporarily unavailable. Which of the following should be implemented to meet this need?

a)

OCSP

b)

CRL

c)

Private CA

d)

CSR

9.

Your organization hosts an internal web site used only by employees. The web site uses a certificate issued by a private CA and the network downloads a CRL from the CA once a week. However, after a recent compromise, security administrators want to use a real-time alternative to the CRL. Which of the following will BEST meet this need?

a)

SAN

b)

CSR

c)

RA

d)

OCSP

10.

An organization hosts several web servers in a web farm used for ecommerce. Due to recent attacks, management is concerned that attackers might try to redirect web site traffic, allowing the attackers to impersonate their e-commerce site. Which of the following methods will address this issue?

a)

Stapling

b)

Perfect forward secrecy

c)

Pinning

d)

Key stretching

11.

Management has mandated the use of digital signatures by all personnel within your organization. Which of the following use cases does this support?

a)

Supporting confidentiality

b)

Supporting availability

c)

Supporting obfuscation

d)

Supporting non-repudiation

12.

A DLP system detected confidential data being sent out via email from Bart’s account. However, he denied sending the email. Management wants to implement a method that would prevent Bart from denying accountability in the future. Which of the following are they trying to enforce?

a)

Confidentiality

b)

Encryption

c)

Access control

d)

Non-repudiation

13.

Your organization recently updated the security policy and mandated that emails sent by all upper-level executives include a digital signature.

Which security goal does this policy address?

a)

Confidentiality

b)

Hashing

c)

Obfuscation

d)

Authentication

14.

You are tasked with getting prices for certificates. You need to find a source that will provide a certificate that can be used for multiple domains that have different names. Which of the following certificates is the BEST choice?

a)

SAN

b)

Domain validation

c)

Extended validation

d)

Wildcard

15.

Your organization recently lost access to some decryption keys, resulting in the loss of some encrypted data. The chief information officer (CIO) mandated the creation of a key escrow. Which of the following cryptographic keys are MOST likely to be stored in key escrow?

a)

Public

b)

Private

c)

Ephemeral

d)

Session