wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

SPC UNIT I

Total questions: 20

Worksheet time: 20mins

Name
Class
Date
1.

Which scenario best illustrates a trade-off between confidentiality and availability in cloud security?

a)

Aarav uses strong AES-256 encryption to protect his sensitive data, but this delays data retrieval slightly when he needs to access it.

b)

Weak access control allows more users to log in quickly, compromising confidentiality.

c)

Aanya hashes data to speed up verification, enhancing availability.

d)

Advait uses TLS to prevent MITM attacks in transit, ensuring confidentiality.

2.

In a tech startup, Kabir is responsible for implementing security measures for their cloud service. He decides to use public-key cryptography for key exchange and symmetric cryptography for bulk encryption. Why is this approach preferred?

a)

Symmetric encryption is always more secure than public-key.

b)

Public-key encryption is too weak for data confidentiality.

c)

Public-key ensures secure key distribution, symmetric ensures efficiency.

d)

Hashing replaces the need for both.

3.

In a cloud application, Arnav receives data that is encrypted but is actually sent by an impostor pretending to be his colleague. This situation demonstrates the failure of authentication but not confidentiality. Which option best describes this scenario?

a)

Data is encrypted but received by an impostor.

b)

Data is unencrypted and exposed during transit.

c)

A user denies sending encrypted data.

d)

Unauthorized changes are detected in a file.

4.

Myra is sending a confidential document to Tara that requires both integrity and non-repudiation. In digital signatures, which combination should she use to ensure these requirements are met?

a)

Symmetric encryption + hashing

b)

Public-key cryptography + hashing

c)

Symmetric encryption + MAC

d)

Public-key cryptography + TLS

5.

Rohan and Ishika are conducting an online transaction for a service. To ensure that neither of them can deny the transaction later, they rely on a financial institution that guarantees this protection. What service is being enforced?

a)

Integrity

b)

Authentication

c)

Non-repudiation

d)

Confidentiality

6.

In a digital communication scenario, Sanya sends a confidential report to Nikita. To ensure that the report has not been altered during transmission, which of the following pairs best differentiates Integrity from Authentication?

a)

Integrity verifies message origin; Authentication ensures data is unchanged.

b)

Integrity ensures data consistency; Authentication verifies identity.

c)

Integrity ensures privacy; Authentication ensures availability.

d)

Integrity ensures access rights; Authentication ensures encryption.

7.

Aashi is tasked with encrypting large cloud datasets for her company's new project. She needs to choose the most efficient encryption method to ensure data security. Which option should she select?

a)

RSA

b)

ECC

c)

AES

d)

SHA

8.

Avyaan is trying to secure his online messages and wants to use a cryptographic function that is one-way and non-reversible. Which function should he choose?

a)

AES

b)

ECC

c)

SHA

d)

RSA

9.

In a cloud storage system, Aditi has stored sensitive encrypted data. One day, she notices that the data has been altered. How will the system detect this alteration?

a)

Through RSA decryption

b)

Using Hash functions with HMAC

c)

By re-encrypting with AES

d)

By applying ECC

10.

A cloud provider implements TLS 1.3 with ECDHE and AES-GCM. This combination ensures:

a)

Confidentiality + Integrity

b)

Confidentiality + Integrity +Authentication only

c)

Confidentiality + Integrity + Perfect Forward Secrecy

d)

Integrity only

11.

Which scenario shows authentication without confidentiality?

a)

Arnav logs into a public website using his password over HTTP

b)

AES encryption of files with no login system

c)

Signed and encrypted email

d)

Encrypted VPN tunnel with anonymous login

12.

Saisha is sending a confidential report to her manager via email. If confidentiality is ensured but authentication fails, what is the risk?

a)

Data can be stolen in plaintext.

b)

Encrypted data may be received by the wrong entity.

c)

Data integrity cannot be verified.

d)

Non-repudiation is guaranteed.

13.

Which scenario best demonstrates the failure of integrity in cloud security?

a)

A cloud user’s login credentials are stolen via phishing.

b)

Ananya's stored medical report in the cloud is altered without authorization.

c)

A cloud storage provider fails to encrypt files before transmission.

d)

A bank employee denies having initiated a legitimate funds transfer.

14.

Aisha is developing a cloud application that uses only symmetric-key encryption to secure communication between clients and the server. She is aware of various security challenges that come with this approach. Which of the following is the MOST significant security challenge she might face?

a)

Difficulty in ensuring integrity of transmitted messages

b)

Increased computational overhead compared to public-key systems

c)

Key distribution and management across multiple users

d)

Inability to provide non-repudiation of transactions

15.

Imagine Riyaan sends a confidential message to Asher using a cloud service that only implements message authentication codes (MACs). What limitation remains in this scenario?

a)

It cannot ensure message integrity.

b)

It cannot authenticate the sender.

c)

It cannot prevent sender denial of having sent the message.

d)

It cannot provide confidentiality.

16.

A healthcare SaaS provider, HealthSecure, stores sensitive healthcare records for various clinics. They encrypt the records with AES-256 and use RSA only during login to exchange the session key. Which security service is MOST directly dependent on RSA in this system?

a)

Confidentiality of stored healthcare records

b)

Integrity of transmitted healthcare records

c)

Confidentiality of the session key during exchange

d)

Authentication of healthcare professionals

17.

In a modern tech company, Shreya is implementing a cloud authentication system that uses digital signatures for login verification instead of traditional passwords. Which advantage does this provide over password-based login?

a)

Users can never be impersonated even if private keys are stolen.

b)

Eliminates need for server-side storage of sensitive credentials.

c)

Provides confidentiality of login messages.

d)

Ensures faster authentication compared to password login.

18.

Dr. Aditi uploads a patient’s report to a cloud data-sharing system. To ensure that she cannot later deny uploading it, which cryptographic method is MOST suitable?

a)

Hashing with SHA-256

b)

AES symmetric encryption

c)

Digital Signatures

d)

HMAC with SHA-512

19.

A cloud API requires that only applications signed by the developer can interact with sensitive services. In a real-world scenario, Ananya is developing a mobile application that needs to access sensitive user data stored in the cloud. To ensure that only her application can access this data, she implements a security measure that mandates all interactions with the cloud API must be signed with her developer credentials. Which combination of security services is achieved here?

a)

Integrity + Authentication

b)

Confidentiality + Access Control

c)

Authentication + Non-repudiation

d)

Access Control + Confidentiality

20.

During a data transmission between a cloud provider and a client, the provider uses asymmetric encryption exclusively, without integrating symmetric encryption. What is the MAIN drawback of this approach?

a)

It cannot provide confidentiality of data

b)

It significantly reduces performance for large-scale operations

c)

It cannot support authentication of users

d)

It makes digital signatures impossible