WorksheetsQuiz về Mã hóa
Total questions: 104
Worksheet time: 35mins
What is the primary purpose of encryption?
To make communication faster
To hide the substance of a message
To enhance network bandwidth
To convert data into physical storage
Which term refers to a message in human-readable form before it is encrypted?
Ciphertext
Keytext
Cleartext
Encrypted message
What does the function D(K, C) represent in cryptography?
Encryption of plaintext using a key
Decryption of ciphertext using a key
Double encryption using two keys
Data compression
Which of the following is NOT a type of attack on a cryptosystem?
Ciphertext-only attack
Plaintext-injection attack
Known-plaintext attack
Chosen-plaintext attack
What is the key size used in the Data Encryption Standard (DES)?
128 bits
64 bits
56 bits
256 bits
Which of the following encryption modes treats the plaintext as a continuous stream of data?
Electronic codebook mode
Cipher feedback (CFB) mode
Block cipher mode
Triple DES mode
Which cryptographic technique involves using the same key for both encryption and decryption?
Public-key encryption
Asymmetric encryption
Symmetric encryption
Digital signatures
Triple DES uses how many keys to improve security over standard DES?
One
Two
Three
Four
IDEA encryption uses which key length for its operations?
56 bits
64 bits
128 bits
256 bits
Which of the following was selected as the proposed Advanced Encryption Standard (AES) by NIST?
RC4
Triple DES
Rijndael
Serpent
Which of the following cryptosystems was originally developed by IBM and later adopted as a federal standard?
AES
DES
RSA
RC4
What is the purpose of the "brute-force" method in cryptography?
To randomly generate encryption keys
To attempt all possible key combinations to break encryption
To generate large amounts of ciphertext quickly
To encrypt data using multiple algorithms
What does Triple DES provide in comparison to standard DES?
Faster encryption
Larger block sizes
Enhanced security by using multiple encryption keys
Compatibility with non-electronic systems
What is the main advantage of IDEA (International Data Encryption Algorithm) over DES?
It is easier to break using brute force
It uses a shorter key length
It provides better security and is more efficient in software implementations
It operates on larger blocks of plaintext
Which of the following encryption algorithms was selected for the Advanced Encryption Standard (AES)?
DES
Triple DES
RC6
Rijndael
How does a stream cipher operate in comparison to a block cipher?
It processes one block of data at a time
It encrypts individual bits or bytes of plaintext continuously
It uses public and private keys for encryption
It only works with symmetric keys
Which cryptographic algorithm uses three 56-bit keys to encrypt data?
RSA
Triple DES
AES
Blowfish
What does the term "differential cryptanalysis" refer to?
An attack method focused on weaknesses in hardware
A technique that analyzes the differences between related plaintext and ciphertext pairs
A brute-force attack using multiple processors
A method of generating encryption keys randomly
Which of the following encryption methods has a block size of 128 bits?
DES
Triple DES
Rijndael
RC4
Why was the AES algorithm designed to be royalty-free worldwide?
To ensure global adoption for sensitive government and business data
To limit cryptographic algorithms to only military use
To increase the computational complexity for attackers
To replace weaker algorithms such as RC2
Which method does DES use to encrypt data?
A one-time pad
Public-key encryption
A 56-bit key in a block cipher
A stream cipher
The cipher feedback (CFB) mode in DES is an example of what type of encryption?
Block cipher encryption
Stream cipher encryption
Asymmetric encryption
Public-key encryption
In public-key cryptography, which key is used to encrypt a message?
A shared secret key
The receiver's private key
The receiver's public key
The sender's private key
What is the main drawback of using brute-force attacks on strong cryptographic algorithms?
It requires knowledge of the plaintext
It takes an impractically long time to break the key
What is the main drawback of using brute-force attacks on strong cryptographic algorithms?
It requires knowledge of the plaintext
It takes an impractically long time to break the key
It weakens the algorithm permanently
It only works with stream ciphers
How is RSA different from DES?
RSA uses symmetric encryption while DES uses asymmetric encryption
RSA uses asymmetric encryption while DES uses symmetric encryption
Both use the same key for encryption and decryption
DES uses public-key cryptography
What is the main function of a hash algorithm in cryptography?
Encrypting data with a public key
Creating a fixed-length output from variable-length input
Encrypting messages using symmetric keys
Generating private and public keys
Which hash algorithm produces a 128-bit hash value?
SHA-1
MD5
SHA-256
AES
The Secure Hash Algorithm (SHA) is a part of which cryptographic function?
Message digesting
Public-key encryption
Symmetric encryption
Stream cipher encryption
What is the purpose of a digital signature?
To encrypt messages
To verify the authenticity of a message
To generate secret keys for encryption
To compress encrypted data
What role does the certification authority (CA) play in a Public-Key Infrastructure (PKI)?
It generates symmetric encryption keys
It verifies and issues digital certificates
It encrypts messages for secure transmission
It ensures anonymity in communication
In public-key cryptography, the private key is used for:
Decrypting a message encrypted with the public key
Encrypting data with symmetric ciphers
Generating hash values
Verifying digital signatures
Which cryptographic method provides both encryption and authentication of messages?
Digital signature
Message digest
Public-key infrastructure (PKI)
Symmetric-key encryption
What is a nonce used for in cryptography?
To increase the strength of the encryption key
To generate random symmetric keys
To prevent replay attacks by ensuring a unique value for each transaction
To compress encrypted messages
Which algorithm is typically used for generating a digital signature?
AES
RSA
MD5
Triple DES
The RSA algorithm relies on the difficulty of:
Factoring large prime numbers
Solving discrete logarithms
Breaking hash functions
Reversing XOR operations
What is the purpose of the Public Key Infrastructure (PKI)?
To encrypt large amounts of data quickly
To manage digital certificates and public-key encryption
To create random keys for symmetric encryption
To store passwords securely
Which technique ensures the authenticity of both the buyer and seller in an online transaction?
Non-repudiation
Symmetric encryption
Hashing
Public-key encryption
In a digital signature system, which key is used to verify the signature?
Private key of the signer
Public key of the signer
Symmetric key shared by both parties
Random key generated for each transaction
What are "blind signatures" used for?
Verifying the identity of a user without revealing their identity
Encrypting large datasets quickly
Generating secure session keys
Preventing brute-force attacks on encrypted messages
Which cryptographic technique is considered ideal for ensuring anonymity in digital payments?
Public-key cryptography
Blind signatures
Symmetric-key encryption
Digital signature
What is the primary security benefit of smart cards in cryptographic systems?
They use asymmetric keys for faster encryption
They store cryptographic keys securely and can perform on-card processing
They generate encryption keys for software-based systems
They enable the creation of public and private keys in real time
Which cryptographic algorithm is best known for its use in secure Internet transactions via SSL/TLS?
AES
RC4
RSA
IDEA
What is the key difference between symmetric and asymmetric encryption?
Symmetric encryption is faster but requires a different key for encryption and decryption
Asymmetric encryption uses the same key for both encryption and decryption
Symmetric encryption uses the same key for encryption and decryption, while asymmetric encryption uses different keys
Asymmetric encryption is used only for hashing algorithms
Which of the following is a key characteristic of a secure hash function?
It can be reversed to retrieve the original message
It produces a unique fixed-length output for every unique input
It generates symmetric encryption keys
It is used only in symmetric encryption schemes
What is the role of the Kerberos protocol in cryptographic systems?
What is the role of the Kerberos protocol in cryptographic systems?
It provides public-key encryption for secure communication
It authenticates users in a network using a trusted third party
It generates random session keys for secure transactions
It compresses data before encryption
Which of the following best describes a MOTO transaction?
A transaction where the customer physically presents the card to the merchant.
A transaction conducted via mail or telephone without the cardholder physically presenting the card.
A transaction conducted in an online marketplace.
A transaction requiring real-time authorization through an electronic terminal.
What is a major risk associated with MOTO transactions compared to face-to-face credit card transactions?
Higher transaction fees.
Increased risk of unauthorized card use (fraud).
Slower payment processing times.
Requirement for additional hardware.
How do merchants usually verify the authenticity of a credit card in a MOTO transaction?
By visually checking the card's security features.
By requiring the cardholder to provide the Card Verification Value (CVV).
By swiping the card through a terminal.
By checking the magnetic stripe data.
Which of the following statements is true about MOTO transactions?
MOTO transactions are usually safer than online transactions.
MOTO transactions do not require any form of cardholder authentication.
MOTO transactions are considered 'card-not-present' transactions, which carry a higher risk of fraud.
MOTO transactions use digital wallets to store card information.
What kind of authentication method is commonly used by merchants in MOTO transactions to reduce fraud risk?
PIN entry by the cardholder.
Verifying the cardholder's CVV (Card Verification Value).
Biometric authentication such as fingerprints.
In-person card verification.
Which type of fraud is MOTO especially vulnerable to?
Merchant fraud.
Phishing attacks.
Unauthorized use of stolen credit card numbers.
Double charging customers.
What is the primary reason that MOTO transactions often have higher merchant fees?
Higher processing speed required.
Lack of physical card presence increases the risk of fraud.
Requirement of additional customer service for telephone orders.
More complex transaction methods.
In MOTO transactions, why is it important for merchants to request the billing address of the cardholder?
To send the receipt via mail.
To verify that the cardholder's billing address matches the one on file with the card issuer, helping to reduce fraud.
To offer personalized services to the cardholder.
To process refund requests more easily.
Which of the following is NOT typically a characteristic of a MOTO transaction?
Card-not-present transaction.
Higher fraud risk compared to in-person transactions.
Real-time encryption of the card details.
Physical signature required at the time of purchase.
Which party typically bears the financial loss in a fraudulent MOTO transaction?
The cardholder.
The merchant.
The card issuer.
The acquiring bank.
What is the key difference between MOTO transactions and traditional credit card transactions?
MOTO transactions involve real-time verification.
MOTO transactions are always conducted through a secure digital gateway.
MOTO transactions do not require the physical presence of the card or cardholder.
MOTO transactions require both the cardholder and merchant to use encryption software.
Which method helps reduce the risk of fraud in MOTO transactions?
Requiring the cardholder to provide a signed document.
Collecting the CVV (Card Verification Value) and verifying the billing address.
Swiping the card through a magnetic stripe reader.
Requiring the cardholder to visit the merchant's physical location.
Which type of liability applies to merchants in case of a chargeback due to fraud in a MOTO transaction?
The card issuer is responsible for all chargebacks.
Merchants are liable for the chargeback and associated costs.
The acquiring bank is responsible for handling the chargeback.
There is no liability for merchants in MOTO transactions.
In MOTO transactions, what does the term 'card-not-present' refer to?
The cardholder does not need to provide their card number.
The transaction is conducted without the physical presence of the card.
The merchant does not need to process the card.
The cardholder must present a digital version of the card.
What is a common security measure used in MOTO transactions to ensure the cardholder's identity?
The merchant requests a physical copy of the card.
The cardholder's signature is captured digitally.
The merchant requests both the card number and the Card Verification Value (CVV).
The cardholder is required to use a biometric authentication method.
Why do many merchants hesitate to accept MOTO transactions?
They require specialized equipment.
The transaction costs are higher due to increased fraud risks.
They are slower to process than traditional payments.
They need to comply with additional legal requirements.
Which of the following is a potential drawback of MOTO transactions for customers?
Customers must pay an additional service fee.
The process is slower than online transactions.
Customers may not receive a receipt for the transaction.
Customers are at higher risk of credit card fraud.
Which of the following is often used by banks to monitor MOTO transactions for fraudulent activity?
Real-time transaction encryption.
Machine learning algorithms to detect unusual spending patterns.
Manually reviewing each transaction.
Biometric verification systems.
How can merchants increase security when processing MOTO transactions?
By requiring the customer to physically visit the store.
By using SSL encryption for all phone calls.
By requesting additional verification, such as CVV and billing address.
By manually verifying each transaction through a bank.
Which factor contributes to the higher chargeback rates in MOTO transactions?
Inability to use a physical card reader.
Lack of customer identity verification methods such as signature or PIN.
The need for specialized hardware to process payments.
Requirement for more complex payment gateways.
What is the primary risk associated with processing credit card transactions over an unsecured network?
The transaction could be delayed.
The transaction data could be intercepted by malicious parties.
The credit card details may not be transmitted correctly.
The merchant might not receive payment.
Which protocol is commonly used to secure credit card transactions over the internet to prevent interception?
FTP (File Transfer Protocol)
SSL (Secure Socket Layer)
HTTP (Hypertext Transfer Protocol)
SMTP (Simple Mail Transfer Protocol)
In the context of unsecured networks, what is a "man-in-the-middle" attack?
An attack where the merchant intercepts the customer's credit card details.
An attack where a third party intercepts communication between the customer and the merchant to steal information.
An attack where the payment gateway fails to process the transaction.
An attack where the cardholder's device is infected with malware.
What is the best practice to protect sensitive data, such as credit card numbers, during online transactions over unsecured networks?
Sending the data via email to the merchant.
Using encrypted communication protocols like SSL/TLS.
Only using a public Wi-Fi network to send the data.
Storing the credit card information in plain text.
Which of the following is a characteristic of unsecured network transactions?
Data is transmitted without encryption, making it vulnerable to interception.
Transactions are faster due to fewer security checks.
The cardholder's identity is always verified using a PIN.
Merchants are protected against fraud when using unsecured networks.
What is the purpose of encryption in network communications?
To reduce the size of data being transmitted.
To convert the information into a format that can only be understood by authorized parties.
To speed up data transfer between two parties.
To ensure that the transaction is approved by the bank.
Which of the following technologies is not recommended for securing transactions on an unsecured network?
SSL/TLS encryption
VPN (Virtual Private Network)
Public Wi-Fi without any security protocols
Two-factor authentication (2FA)
What happens if credit card data is sent over an unsecured network without encryption?
The transaction will automatically be declined.
The data can be easily intercepted and read by attackers.
The cardholder will be notified immediately.
The data will be processed normally without any risk.
In an unsecured network environment, what is the role of SSL/TLS certificates?
To identify the merchant during a transaction.
To encrypt the connection between the cardholder and the merchant.
To store the cardholder's information for future transactions.
To verify the credit card number.
What is the most common type of attack on unsecured networks when processing payments?
SQL injection
Man-in-the-middle attack
Phishing
Ransomware
What is the biggest threat when making payments over an unsecured network?
The payment may not go through.
The transaction could be intercepted by attackers, leading to stolen payment information.
The merchant might not receive a confirmation for the payment.
The payment gateway could overcharge the customer.
Which of the following is a typical method used by hackers to steal payment information over an unsecured network?
Social engineering
Phishing
Man-in-the-middle attack
SQL injection
How can a customer protect their payment details when using an unsecured network?
Use public Wi-Fi and trust the website security.
Always enter payment information directly on the merchant's website without encryption.
Use a VPN or ensure the website uses HTTPS with SSL/TLS encryption.
Disable the browser's pop-up blocker for better payment processing.
What does the term 'card-not-present' fraud typically involve in unsecured network payments?
The fraudster makes a payment without needing the physical card.
The merchant charges the customer more than the authorized amount.
The customer uses a fake credit card.
The transaction fails due to network errors.
Which of the following is *not* a recommended action when making payments on an unsecured network?
Use a secure VPN to encrypt your connection.
Check for SSL/TLS certificates and HTTPS on the payment page.
Enter payment details on unsecured websites with HTTP.
Enable two-factor authentication for payment authorization.
What is one of the primary security mechanisms that should be used to protect payment data on an unsecured network?
SSL/TLS encryption
Using a weak password for your account
Disabling encryption for faster transactions
Avoiding the use of antivirus software
Why are unsecured networks often targeted for payment fraud?
They provide direct access to the merchant's payment gateway.
Data sent over unsecured networks is transmitted in plain text, making it easy to intercept.
They speed up the payment process, reducing the chance of detection.
They offer advanced encryption methods that are hard to break.
What type of encryption is most commonly used to secure payments over a network?
AES (Advanced Encryption Standard)
SSL/TLS (Secure Socket Layer/Transport Layer Security)
DES (Data Encryption Standard)
MD5 (Message Digest Algorithm 5)
Which of the following payment methods is most vulnerable to interception over an unsecured network?
Payments using a debit card with a chip.
Payments entered on websites without SSL/TLS encryption.
Contactless payments using NFC technology.
Payments using two-factor authentication (2FA).
How does SSL/TLS encryption protect payment transactions on an unsecured network?
It prevents the transaction from being processed.
It encrypts the data being transmitted, making it unreadable to attackers.
It speeds up the transaction to avoid interception.
It bypasses the payment gateway for faster transactions.
What was the main feature of the First Virtual payment system?
It allowed customers to pay using cryptocurrency.
It did not use encryption to secure transactions but instead relied on confirmation via email.
It used biometric authentication for payment security.
It required customers to have a physical token for authentication.
How did First Virtual verify transactions?
By sending a confirmation email to the customer before completing the transaction.
By requiring customers to enter their credit card information directly on the merchant's website.
By using an encrypted token stored on the customer's computer.
By sending a one-time password (OTP) to the customer's phone.
What made First Virtual different from other early online payment systems?
It was the first system to use blockchain technology.
It did not require users to enter sensitive information, such as credit card numbers, directly over the internet.
It was the first system to implement real-time transaction authorization.
It operated exclusively through smartphone apps.
What was a major limitation of the First Virtual payment system?
It did not support international transactions.
It required customers to enter sensitive financial data over the internet.
It did not use encryption for securing online transactions.
Why did First Virtual not use encryption for its transactions?
The system was designed to prioritize ease of use and email-based confirmation over encryption.
Encryption was too costly to implement.
The system relied on a third-party encryption service.
First Virtual used encryption, but only for international transactions.
What ultimately contributed to the decline of the First Virtual payment system?
Its inability to handle large volumes of transactions.
Its reliance on email for transaction verification, which was slower and less secure compared to modern encryption technologies.
The high transaction fees it charged merchants.
The lack of support for mobile payments.
Which of the following best represents the security model of First Virtual?
The system relied on encrypting all data transferred between the customer and the merchant.
It used a trust-based system with email confirmations instead of encrypting sensitive payment data.
It used advanced machine learning algorithms to detect fraud in real-time.
It required customers to use two-factor authentication to complete transactions.
How did First Virtual ensure that customers were aware of transactions made with their account?
By sending a real-time SMS notification.
By sending an email to the customer requesting confirmation before processing.
By using in-browser pop-up confirmations.
By automatically logging the user out after every transaction.
Which year did First Virtual launch its payment system?
1992
1994
1996
1998
What type of payment model did First Virtual primarily use?
Subscription-based model
Email-based confirmation model
Real-time credit card processing
Pay-per-use model
Which of the following was not a feature of First Virtual?
Lack of encryption for online transactions.
Email-based transaction verification.
Real-time settlement of payments.
A trust-based payment system.
How did merchants receive payment through the First Virtual system?
By providing encrypted payment details to a bank.
By receiving confirmation from First Virtual after the customer approved the transaction.
By processing payments through a third-party gateway.
By directly receiving funds once the customer initiated the transaction.
What was one of the main challenges faced by First Virtual in gaining wide adoption?
Slow transaction processing times.
Customers' reluctance to use email for financial transactions due to security concerns.
High transaction fees for both merchants and consumers.
Limited support for debit cards.
How did First Virtual handle disputes between customers and merchants?
By freezing the account until the issue was resolved.
By relying on email communication to confirm or reject the disputed transaction.
By issuing refunds automatically to customers.
By using a third-party arbitration service.
First Virtual's decision to avoid using encryption was primarily due to:
The high cost of encryption technologies at the time.
The belief that email-based confirmations were sufficient for security.
The inability to implement encryption with existing infrastructure.
Regulatory restrictions on the use of encryption.
Which of the following best describes the failure of First Virtual's payment system?
It failed to provide adequate customer service.
It could not compete with more secure, encryption-based payment systems.
It focused too heavily on international markets.
It charged excessive fees to both merchants and customers.
What was a key advantage of the First Virtual system for users?
It provided instant transaction approval.
It did not require users to submit credit card information directly over the internet.
It offered cashback incentives for each transaction.
It all
