What is the technical term for the scrambled, unreadable result after an encryption algorithm has been applied to the readable message?

The security of a modern cryptosystem relies primarily on the secrecy and complexity of the key, even if the algorithm is publicly known. This concept aligns with:

The Caesar Cipher is an example of which type of classical cryptographic technique?

Classical relies on computers; Modern relies on manual methods. Which is correct?

Which type of encryption is defined using a single, shared secret key for both encryption and decryption?

The Advanced Encryption Standard (AES) is a widely used example of which type of algorithm?

In an Asymmetric Encryption system, which key must be kept secret and is used by the owner to decrypt messages sent to them?

What is the primary role of Asymmetric Encryption (e.g., RSA) in a hybrid security session?

A Digital Signature is created by encrypting the document's hash using the sender's Private Key. This process primarily enforces which cryptographic goal?

Which layer of the OSI Model is primarily responsible for IP addressing and routing data between different networks?

Which network attack involves a malicious actor crafting IP packets with a false source address to impersonate a legitimate host?

The main security advantage of using Subnetting to divide a network into smaller segments is to:

Which device operates at Layer 2 (Data Link) and uses MAC addresses to forward traffic only to the intended recipient on the local segment?

In the TCP/IP Model, which layer is responsible for combining the Application, Presentation, and Session layers of the OSI Model?

Which type of firewall maintains a table of active sessions to ensure that only incoming traffic that is part of an established internal request is allowed back into the network?

A security policy states that all traffic not explicitly permitted by a firewall rule must be blocked. This is known as the:

What is the fundamental difference between an Intrusion Detection System (IDS) and an Intrusion Prevention System (IPS)?

Which detection method relies on establishing a baseline of normal network behavior and flags traffic that deviates significantly from that norm?

A security system correctly identifies and blocks a malicious packet based on its comparison to a known virus signature in a database. This is an example of:

A sender calculates a message digest (hash) of a contract and sends both the contract and the digest. The receiver calculates a digest of the received contract and compares it to the sent digest. If the two digests match, which security goal is primarily verified?

An attacker obtains a long string of ciphertext encrypted using a simple Caesar Cipher. The most effective way to break this cipher, rather than brute-forcing 25 possible keys, is to look for common letter patterns (e.g., 'e', 't', 'a'). This cryptanalytic technique is known as:

An algorithm takes the original password 'SECRET' and uses a secret password ('KEY1') to produce the scrambled output 'XTYZAB'. In this process, the original password 'SECRET' is referred to as the:

Alice wants to send a large 1GB file securely to Bob. To maximize speed and ensure security, Alice encrypts the file with a newly generated AES Key, and then encrypts the AES Key itself using Bob's Public Key. What term describes this two-tiered approach to secure communication?

A recipient verifies a digital signature using the sender's Public Key and successfully recovers the original hash value. What two conclusions can the recipient immediately draw based on this successful verification?

A system administrator needs to choose a key generation method for a device that has very limited processing power (e.g., an IoT sensor), but still requires high security (equivalent to a 2048-bit RSA key). Which asymmetric algorithm is the best choice due to its efficiency with smaller key sizes?

An attacker is attempting to sniff all network traffic between two workstations on the same local segment. The most effective way to mitigate this threat is to ensure the network uses a Switch instead of a Hub. Why?

A company decides to use Subnetting to separate its Finance department computers from its Guest Wi-Fi network. What is the primary security outcome of this action?

A security analyst observes a high volume of packets arriving at the server with a false source IP address, causing the system to send response packets to an unintended victim. This activity is a hallmark of which network protocol vulnerability?

A firewall receives a packet that attempts to connect to port 80 (HTTP) from the external network to an internal server. The firewall rule set has rules explicitly allowing all internal traffic, but no rule explicitly permits external port 80 traffic. The packet is blocked. Which firewall concept resulted in the block?

An organization deploys a security device that detects a known malware signature in a file transfer and immediately terminates the connection, preventing the file from reaching the internal host. This action was taken by a(n):

A newly implemented IDS system begins flagging network usage as "high-risk" because a specific server is sending 50% more data than its historical average, even though no known malicious signatures were found. This detection mechanism is best categorized as:

A company implements a Stateful Inspection Firewall to control Layer 4 ports and an IPS using Signature-Based detection. The IPS fails to block a brand new, never-seen-before zero-day SYN Flood variant which successfully exploits the TCP handshake vulnerability. Which combination of concepts is relevant to the failure to block this attack? (3pts.)

Evaluation of Modern Ciphers: A major defense contractor is developing a new encryption standard. Following Kerckhoff's Principle, which of the following scenarios poses the greatest security risk to the new cipher?

(Evaluation: Kerckhoffs's Principle states the algorithm is assumed public; security relies on the key. A short, reused key is the fundamental point of failure, independent of the algorithm's secrecy.)

Justification of Classical Ciphers: Why is the Vigenère Cipher fundamentally more resilient to basic cryptanalysis (like frequency analysis) than the simple Caesar Cipher?

Synthesis of Cryptographic Goals: The primary role of the Key in combination with an encryption Algorithm is to transform Plaintext into Ciphertext. What security goal is directly achieved by the success of this transformation?

Evaluation of Hybrid Cryptosystems: A global CDN (Content Delivery Network) must send terabytes of data daily while ensuring confidentiality. A pure Asymmetric Encryption system is ruled out for data transfer. What is the most critical reason for this exclusion?

Synthesis of Non-repudiation: A digital signature provides non-repudiation because the signer uses their Private Key to encrypt the document's hash. If the signer were to later deny sending the document, why would this defense fail in court?

Justification of Algorithm Choice: Why did the US government replace the Data Encryption Standard (DES) with the Advanced Encryption Standard (AES) as the standard symmetric cipher?

Evaluation of Network Controls: A Network Administrator uses Subnetting to isolate the company's critical database servers from the rest of the network. They then configure the Router’s ACLs to only allow traffic from specific management workstations to that subnet. Which level of defense is the subnetting providing, and which is the ACL providing?

Evaluation of Protocol Vulnerabilities: The Telnet protocol sends user login credentials over the network in plaintext (unencrypted). Which core security goal is directly violated by this protocol vulnerability?

Justification of Layering: A modern Firewall makes its access decisions based on the IP address (Layer 3) and the Port Number (Layer 4). Why is it functionally necessary for this critical security device to operate across multiple layers of the OSI model?

A company's security policy requires that any detected external network attack must be immediately and automatically stopped, without waiting for human intervention. Which security system is mandatory to meet this requirement?

Synthesis of Firewall State: A hacker sends a sequence of random packets to an internal server without first initiating a proper three-way handshake. A Packet Filtering Firewall might allow these packets, but a Stateful Inspection Firewall would drop them. Why?

Comprehensive Scenario Analysis: A critical database server storing AES Keys is placed on its own dedicated Subnet and is protected by a Stateful Inspection Firewall. How does this layered defense strategy best protect the Confidentiality of the keys?