NEW
Font size
WorksheetsGeneral security Concepts Part 1
Total questions: 30
Worksheet time: 10mins
Which statement best describes symmetric encryption?
Uses the same key for encryption and decryption
Uses a public key to encrypt data and a private key to decrypt it
Encrypts data one bit at a time with no key
Automatically rotates keys for every message
What is the main challenge of symmetric encryption?
Cipher complexity
High computational load
Compatibility with digital signatures
Key distribution
How does asymmetric encryption solve the key distribution problem?
By sharing the private key publicly
By using a shared secret for both parties
By using a public key to encrypt and a private key to decrypt
By encrypting only hashes, not the message
In hybrid encryption, what role does asymmetric encryption play?
Encrypts all bulk data
Creates digital signatures only
Exchanges a symmetric session key securely
Hashes the message before encryption
What is a key property of a secure hash function?
Encryption reversibility
Collision resistance
Use of a shared secret key
Ability to decrypt data
Why is salting used in password hashing?
To make passwords unreadable by adding a random string
To encrypt the password with a public key
To reduce hash computation time
To allow symmetric decryption
What does a digital signature ensure?
Only confidentiality of the message
Authentication, integrity, and non-repudiation
Faster encryption of bulk data
Public key distribution
Which component of PKI verifies the identity of a certificate requester?
End-Entity
Certificate Repository
Registration Authority (RA)
Root Certificate
What feature of blockchain ensures that data cannot be altered once added?
Proof of Work
Hash chaining
Tokenization
Encryption with AES
Which obfuscation technique replaces sensitive data with meaningless tokens?
Data masking
Tokenization
De-Identification
Anonymization
How does homomorphic encryption enhance data privacy?
Encrypts only the metadata of files
Allows computations on encrypted data without decryption
Uses quantum keys to encrypt all data
Masks sensitive data for testing
What is the main advantage of Quantum Key Distribution (QKD)?
Alerts the sender if the key is intercepted
Provides faster encryption than AES
Allows bulk data encryption efficiently
Automatically generates digital certificates
Which of the following is true about stream ciphers?
Encrypts large blocks of data at once
Cannot use an initialization vector (IV)
Encrypts one bit or byte at a time
Always requires asymmetric encryption
Why are TPMs used in modern systems?
To perform digital signatures for certificates
To store and protect encryption keys securely in hardware
To replace asymmetric encryption in cloud systems
To perform hash computations faster than CPUs
In password security, what is key stretching?
Using longer passwords without hashing
Repeatedly hashing a password to slow down brute-force attacks
Encrypting the password with AES
Masking the password in test databases
Which of the following is a popular symmetric encryption algorithm?
RSA
AES
RCC
MD5
Why is the Caesar Cipher considered insecure today?
It uses variable key lengths
It only encrypts numbers
It requires public key distribution
It can be broken using brute-force attacks
What is a hash function mainly used for?
Encrypting large volumes of data
Creating digital certificates
Ensuring data integrity
Sharing secret keys
How does salting improve password security?
Encrypts passwords using AES
Adds a random value to prevent rainbow table attacks
Stores passwords in plaintext
Compresses password length
What is the main benefit of HMAC (Hash-Based Message Authentication Code)?
Verifies both data integrity and authenticity
Encrypts data for confidentiality
Generates random session keys
Creates a public/private key pair
Why is quantum key distribution (QKD) considered future-proof?
It uses extremely long keys
It hashes all messages
It combines symmetric and asymmetric encryption
Interception changes the quantum state, revealing eavesdroppers
What is the purpose of a Certificate Revocation List (CRL)?
Encrypt messages
List certificates that are no longer valid
Generate session keys
Verify passwords
What does a digital certificate primarily provide?
Data confidentiality
Identity verification
Encryption speed
Hash digest
Which cryptographic hardware module is embedded in a computer’s CPU for key protection?
HSM
Secure Enclave
TPM
Cryptoprocessors
Which data state benefits most from full disk encryption?
Data in Transit
Data in Use
Data at Rest
Data in Memory
Which method protects confidentiality but not integrity by default?
Encryption
Hashing
Checksums
Tokenization
Which data state is hardest to protect cryptographically?
Data at Rest
Data in Transit
Data in Use
Archived Data
Why is encryption important for backups?
Why is encryption important for backups?
To speed up recovery
To protect stored data from unauthorized access
To ensure availability
Which cryptographic method is reversible?
Hashing
Masking
Encryption
Checksums
What is the main weakness of obfuscation?
It is reversible
It provides no real cryptographic security
It changes data format
It breaks applications
