NEW
Font size
WorksheetsCybersecurity and Identity Management Quiz
Total questions: 15
Worksheet time: 9mins
A financial institution uses centralized key management to store encryption keys for thousands of client devices. During an investigation, the compliance team needs access to an encrypted backup without the original key owner. Which key management concept allows secure recovery of the encryption key while preventing misuse by a single person?
Key escrow with M-of-N control
Key stretching with a salt
Decentralized key storage
Certificate revocation list
An administrator wants to send a digitally signed contract to a business partner to prove that the message came from them and hasn’t been altered. Which key is used to verify the sender’s digital signature?
Sender’s private key
Sender’s public key
Receiver’s private key
Receiver’s public key
A software developer hashes a file with SHA-256 and compares the hash before and after a network transfer. What is the developer verifying?
Confidentiality
Integrity
Availability
Non-repudiation
A company uses an internal CA to issue digital certificates to employees for VPN authentication. Management wants to expand to external partners who cannot trust the internal CA directly. Which solution provides a trusted validation path between organizations?
Use a third-party root CA
Deploy self-signed certificates
Use OCSP stapling
Create a decentralized CA
A laptop containing sensitive medical records is stolen. Investigators confirm the hard drive is encrypted and cannot be accessed without the user’s credentials. Which concept best describes this protection method?
Database encryption
Data in transit encryption
Full-disk encryption
Hashing
A penetration tester discovers that a company’s password hashes are vulnerable to rainbow table attacks. Which improvement would best defend against this vulnerability?
Add salting and key stretching
Reduce the key length
Use symmetric encryption for passwords
Disable hashing altogether
A large enterprise wants to securely generate and store cryptographic keys in hardware that can detect tampering and operates separately from general system memory. Which technology best meets this requirement?
TPM or HSM
ECC
OCSP
PKCS
A remote employee logs in using their username, password, and a six-digit code from an app on their phone. Which authentication factors are being used?
Something you know and something you have
Something you have and something you are
Something you know and somewhere you are
Something you do and something you know
A company moves to FIDO2 security keys that use a biometric gesture on the key to sign in—no passwords are used. What security principle does this method rely on?
Public/private key pair with local attestation
Shared secret key exchange
Token-based one-time passwords
Centralized password vaulting
A database administrator defines user permissions strictly by job roles—sales reps can only view customer data, while finance can edit billing. Which access control model is in use?
Discretionary Access Control (DAC)
Role-Based Access Control (RBAC)
Mandatory Access Control (MAC)
Attribute-Based Access Control (ABAC)
A healthcare provider and an insurance company agree to trust each other’s authentication systems so employees can access shared web apps without new accounts. Which identity concept describes this setup?
Single sign-on
Federation
OAuth
PKI
An organization adopts a policy where administrator accounts have zero standing privileges and must request time-limited elevation through a secure workstation when needed. What security concept does this represent?
Mandatory Access Control
Privileged Access Management
Rule-Based Access Control
Attribute-Based Access Control
A global company implements a system that blocks sign-ins from two distant countries within minutes of each other for the same user account. Which control is this example of?
Impossible travel policy
Time-based access control
Location-based access policy
Continuous authentication
What type of attack involves overwhelming network resources with unwanted traffic?
Phishing attack
Distributed Denial of Service (DDoS) attack
SQL injection
Man-in-the-middle attack
