Font size
WorksheetsMod 3 Sec+ 8e
Total questions: 34
Worksheet time: 22mins
Adelli sends an image file containing a secret message to her sister as an attachment. Adelli gives her sister instructions over the phone on how to read the message. The sister follows the instructions and reads the message. Which of the following techniques did Adelli use?
Hashing
Encryption
Stenography
Steganography
Alpha and Beta are having a conversation in English. Gamma, who is a gifted conversationalist and tends to monopolize conversations, approaches Alpha and Beta. As soon as Alpha and Beta see Gamma, they start speaking in Spanish, but Gamma does not understand. What did Alpha and Beta just do?
They employed a form of tokenization.
They employed a form of encryption.
They employed a form of substitution.
They employed a form of steganography.
A fifth-grade teacher shows the class a message encrypted using ROT13. After explaining how it works, the teacher challenges them to decrypt the message, which they easily accomplish. The teacher then repeats the process with the XOR cipher. Which of the following statements is true? Select two.
ROT13 uses transposition.
XOR uses a form of metadata.
Both methods use substitution.
XOR requires some type of key.
The class easily decrypts XOR messages.
Johnny develops an app to encrypt short messages. He runs the encryption program, but it is designed to deliberately introduce a 5- to 15-second delay before encryption begins. What type of data is Johnny about to encrypt?
Plaintext
Cleartext
Ciphertext
Pretext
Which of the following statements best describes the critical factor that allows cryptographic algorithms to be effective?
The details of how the algorithm works must be guarded.
The encryption algorithm and keys must both be guarded.
The algorithms must be able to guarantee confidentiality.
The key(s) used by algorithms must be securely guarded.
Which of the following statements best describes the benefits of cryptography? Select two.
Hiding information through encryption so that threat actors cannot view it is considered one of several different mitigation techniques that enterprises can use to protect information. It is also considered a hardening technique that makes a system more resilient to attacks. Which of the following statements are true about encryption?
It is a hashing technique.
It is a hardening technique.
Cipher algorithms are secret.
It can hide the existence of data.
Daichi works on a project team that is designing a storage system with immutable archiving capabilities. Once data is archived, it uses cryptography to verify the data has not been changed. Which security protection is the system designed to enforce?
Immutability of data
Nonrepudiation
Integrity
Data masking
An employee tries to mask his identity by programmatically changing the From field to "a-nony-mouse" in an email. He uses periodic intervals to send the email to the entire company promoting a product he is selling online. An investigation reveals who sent the message. What capability of cryptography was used to confirm the sender's identity?
Metadata
Obfuscation
Repudiation
Nonrepudiation
A group of scientists are trying to vigorously protect a major discovery that will potentially lead to a series of breakthrough products. They all sign a special nondisclosure agreement and commit to not revealing the information to others outside of the department. What approach have the scientists agreed to employ?
Diffie-Hellman
Secure obfuscation
Signed message digest
Security through obscurity
Which of the following statements correctly describes the differences or similarities between a stream cipher and a block cipher? Select two.
Both are like a one-time pad.
Stream ciphers are less secure.
Stream ciphers randomize the output.
Block ciphers reset after each iteration.
Block ciphers replace characters one at a time.
Kalaki subscribes to an online computer digest. Kalaki notices a string of characters with a message next to a link that reads "... use to verify file integrity after downloading." What does the string of characters represent? Select four.
A dynamic OTP
A message digest
A checksum
A digital signature
A hash
A hash algorithm creates a unique "digital fingerprint" of a set of data. This process is called hashing, and the resulting fingerprint is a digest (sometimes called a message digest or simply a hash) that represents the contents. A hash is the result of a one-way cryptographic algorithm. It is designed so that it cannot be reversed to reveal the original set of data. Select all that apply.
A message digest
A digital fingerprint
The key to decrypt the file
The result of a one-way algorithm
Bodhi is leading a team responsible for writing the specifications of a new hashing algorithm. What factor does the team need to keep in mind to ensure it is secure? Select three.
Encryption and decryption should use the same key.
It should include private key encryption capabilities.
Every unique input should render unique output.
The output should always be of a fixed size.
The output should be original.
Salvadori wants to send a message halfway around the world via email. He would like to convey the hash corresponding to the message over the phone to the recipient. Which of the following hash algorithms should Salvadori use? Select three.
RipeMD
SHA-2
Whirlpool
ECC
MD5
A company is exploring a variety of symmetric key algorithms to use in an app. Which of the following statements best describes a possible concern?
Both the encryption and decryption keys must be kept private.
If the public key encrypts, it should not be able to decrypt.
The private and public keys must be kept secret/secure.
The key must be kept private.
Which of the following statements properly expresses the characteristics of AES and Blowfish? Select three.
AES and Blowfish use private key cryptography.
AES is capable of using a 256-bit key.
Blowfish operates on 64-bit blocks.
AES is a stream cipher while Blowfish is a block cipher.
Blowfish is capable of using a 512-bit key.
Pasua encrypts a message using a public key and the recipient decrypts the message using the corresponding private key. What conclusions can you draw based on these actions?
Private key cryptography was used.
A symmetric cryptographic algorithm was used.
An asymmetric cryptographic algorithm was used.
Pasua needs to use his private key to encrypt a message.
You need to explain to the CEO of a company the differences between symmetric and asymmetric cryptographic algorithms. Which one of the following statements are you most likely to convey?
Symmetric cryptographic algorithms use public key cryptography.
ECC is among the better asymmetric cryptographic algorithms.
RSA is a sound asymmetric algorithm for low-power devices.
Symmetric cryptographic algorithms are more secure.
Rico sends a message to Lola. However, based on how the message was sent, Lola cannot verify it was sent from Rico, but she can verify it has not been altered. What could Rico have done that would have enabled Lola to verify the sender? Select two.
Use her public key to encrypt the message instead of her private key.
Use his public key to encrypt the message instead of his private key.
Generate a digital signature and attach it to the message.
Generate a digest and encrypt it with his digital signature.
Generate a digest and encrypt it with his private key.
Which of the following statements is true regarding hashing?
Hashing can be used to help verify the integrity of a message.
Hashing can be used to help encrypt a secure message digest.
ECC and RSA are examples of asymmetric hashing algorithms.
Hashing is used to help secure both private and public keys.
Which key combination would the recipient of a message use to confirm the integrity of the message as well as the authenticity of the sender?
The sender's public key and the recipient's private key
The sender's public key and the recipient's public key
The sender's private key and the recipient's public key
The sender's private key and the recipient's private key
Which of the following is a true statement regarding key exchange solutions?
Perfect forward secrecy uses random and different keys for each session.
DHE uses the same key until the user-defined expiration timer is exhausted.
DH employs temporary keys that are used once and then they are discarded.
ECDH uses elliptic curve cryptography with prime numbers to compute keys.
Quinto wants to set up an encrypted folder on his computer running Microsoft Windows. Which of the following is Quinto most likely to use?
GnuPG
EFS
TDE
FDE
FileVault
Weymouth works at a computer repair shop. A customer brings a hard drive claiming their computer crashed and they would like to restore the information on the drive. Weymouth installs the drive in a computer case as a secondary drive but is not able to access the data. Which of the following is a probable cause? Select two.
(a)
Protecting the entire hard drive using cryptography is known as full-disk encryption (FDE) and protects all data on a hard drive, including the installed OS. One example of FDE software is included in Microsoft Windows and is known as BitLocker drive encryption software. BitLocker prevents attackers from accessing data by booting from another OS or placing the hard drive in another computer. Which of the following are examples of full-disk encryption?
BitLocker
BitLocker
Volume-level encryption
Partition-level encryption
MBR/GPT-level encryption
After a recent breach in your industry, you are asked to ensure the databases your company uses are encrypted. They also request performance degradation be kept to a minimum. Which database encryption method are you most likely to implement?
Column-level encryption
File-level encryption
Table-level encryption
Record-level encryption
Cell-level encryption
Which of the following represents a true statement regarding software and hardware encryption? Select three.
The trusted execution environment is a very secure software model.
Hardware encryption cannot be exploited like software encryption.
SEDs require successful authentication before access is granted.
TEE protects the confidentiality and integrity of its code and data.
HSM is a software-based encryption engine with extremely secure keys.
How does Blockchain use cryptography to ensure the integrity of data?
It uses cryptographic hash algorithms to encrypt transactions.
It uses cryptographic hash algorithms to record transactions.
It uses symmetric cryptographic algorithms to record transactions.
It uses asymmetric cryptographic algorithms to record transactions.
Which of the following statements best describes a challenge, if any, associated with securing low-powered devices with very fast response times?
The response time of low-powered devices is inadequate.
Cryptographic algorithms require a lot of time and energy.
Due to their small size, it is considerably more expensive.
There are no significant challenges securing low-powered devices.
Barrabi mined Bitcoin years ago that is now worth millions of dollars. He encrypted the password but can't remember the key he used to encrypt it. Upon employing the services of Barnum, a skilled security professional, he was eventually able to determine the key. Which of the following best explains what Barnum did or used to determine the key?
Sophisticated statistical tools exist that can be used to perform an analysis of the ciphertext in an attempt to discover a pattern in the ciphertexts, which then may be useful in revealing the plaintext or key. This is called a known ciphertext attack or ciphertext-only attack because all that is known is the ciphertext, but it can still reveal clues that may be mined. What did he perform?
He used a reverse hashing algorithm.
He performed a cyphertext attack.
He performed a collision attack.
He used a quantum computer.
Cadence will attempt to find two different sets of input text that will yield the same hash when using MD5. What type of attack is Cadence most likely to perform?
Birthday paradox
Plaintext attack
Collision attack
Downgrade attack
Misconfiguration attack
An attacker is scanning wireless networks and discovers that one of them is set up to support the two most recent protocols. What type of attack is the malicious actor most likely to launch to try to breach the security settings of the wireless device?
Entropy attack
Protocol attack
Upgrade attack
Downgrade attack
