WGU D830 INTRODUCTION TO
CRYPTOGRAPHY OA STUDY GUIDE |
651 QUESTIONS AND ANSWERS WITH
RATIONALES | PSY0/SY01 V1 & V2 |
100% CORRECT 2026.
Core Domains
1. Cryptographic Foundations: Ciphers, Algorithms, and Security Principles
2. Symmetric Cryptography: Block Ciphers, Stream Ciphers, and Modes of
Operation
3. Asymmetric (Public-Key) Cryptography: RSA, ECC, Diffie-Hellman, and Key
Exchange
4. Hash Functions, Digital Signatures, and Message Authentication Codes (MACs)
5. Public Key Infrastructure (PKI), Certificates, and Trust Models
6. Key Management, Distribution, and Lifecycle
7. Cryptographic Applications: TLS/SSL, IPsec, SSH, and Wireless Security
8. Cryptanalysis, Attacks, and Vulnerabilities
9. Emerging Technologies: Quantum Cryptography, Lightweight Cryptography, and
Homomorphic Encryption
10. Legal, Ethical, and Regulatory Considerations in Cryptography
Introduction
This comprehensive study guide is designed to provide focused preparation for the
WGU D830 Introduction to Cryptography Objective Assessment, covering both V1
and V2 versions. The assessment will evaluate your understanding of fundamental
cryptographic concepts, including symmetric and asymmetric encryption, hash
functions, digital signatures, and Public Key Infrastructure (PKI). You will be
challenged to apply theoretical knowledge to practical scenarios involving key
,management, secure communications, and cryptographic attacks. This guide aligns
with the PSY0/SY01 objectives and the latest 2026 updates, offering a robust review
of the critical knowledge required to succeed on the exam. Mastery of these topics
is essential for securing modern networks and understanding the cryptographic
underpinnings of information security.
Section One: Questions 1–200
1. What type of cryptographic system should be chosen to encrypt a large file
payload efficiently?
A. Symmetric Cryptography
B. Asymmetric Cryptography
C. Hash Function
D. Steganography
A. Symmetric Cryptography
RATIONALE: Symmetric encryption is computationally fast and highly efficient,
making it the proper choice for encrypting large amounts of bulk data . Asymmetric
encryption is slower due to complex mathematical operations and is typically
reserved for key exchange and digital signatures.
2. What is a hybrid cryptosystem?
A. A cipher that combines substitution and transposition
B. A system using asymmetric encryption to share a symmetric key, which then
encrypts the bulk payload
C. An encryption method that works on both local and cloud platforms
D. A tool running stream and block configurations simultaneously
B. A system using asymmetric encryption to share a symmetric key, which then
encrypts the bulk payload
RATIONALE: Hybrid systems (like HTTPS/TLS) combine the key-sharing
convenience of asymmetric ciphers with the high speed of symmetric ciphers .
,Asymmetric encryption secures the symmetric key during exchange, which then
encrypts the actual data.
3. What is the fixed bit length of an MD5 hash digest?
A. 64 bits
B. 128 bits
C. 160 bits
D. 256 bits
B. 128 bits
RATIONALE: The Message Digest 5 (MD5) algorithm produces a signature
output of exactly 128 bits, regardless of input volume . This is typically displayed as
a 32-character hexadecimal string.
4. What is the output length of the SHA-1 hash function?
A. 128 bits
B. 160 bits
C. 256 bits
D. 512 bits
B. 160 bits
RATIONALE: SHA-1 produces a 160-bit message digest . It is officially retired
from secure use due to practical collision demonstration exploits .
5. What cryptographic mechanism combines a hash function with a secret
symmetric key to provide both data integrity and data origin authentication?
A. Digital Signature
B. HMAC (Hash-Based Message Authentication Code)
C. Salted Hash
D. Key Derivation Function
B. HMAC (Hash-Based Message Authentication Code)
, RATIONALE: HMACs combine a hash function with a shared key, confirming
that data wasn't modified and validating that the sender knows the secret key . This
provides both integrity and authentication.
6. What data is added to plaintext passwords before hashing to defeat
precomputed Rainbow Table cracking attacks?
A. Initialization Vector
B. Digital Certificate
C. Salt
D. Nonce
C. Salt
RATIONALE: Salting adds unique, random characters to passwords prior to
hashing, ensuring identical passwords yield completely distinct hash outputs . This
renders precomputed rainbow tables ineffective.
7. In which type of attack does an adversary collect encrypted messages and
attempt to decrypt them without knowing anything about the plaintext or
algorithm?
A. Ciphertext-Only Attack
B. Known-Plaintext Attack
C. Chosen-Plaintext Attack
D. Side-Channel Attack
A. Ciphertext-Only Attack
RATIONALE: In a ciphertext-only scenario, the attacker lacks context, samples,
or control, making it the hardest cryptanalysis vector to execute . The attacker only
has access to the encrypted messages.
8. If an attacker intercepts a ciphertext string and also somehow obtains its
exact matching plaintext string, what kind of attack can they mount?
A. Ciphertext-Only Attack
B. Known-Plaintext Attack
CRYPTOGRAPHY OA STUDY GUIDE |
651 QUESTIONS AND ANSWERS WITH
RATIONALES | PSY0/SY01 V1 & V2 |
100% CORRECT 2026.
Core Domains
1. Cryptographic Foundations: Ciphers, Algorithms, and Security Principles
2. Symmetric Cryptography: Block Ciphers, Stream Ciphers, and Modes of
Operation
3. Asymmetric (Public-Key) Cryptography: RSA, ECC, Diffie-Hellman, and Key
Exchange
4. Hash Functions, Digital Signatures, and Message Authentication Codes (MACs)
5. Public Key Infrastructure (PKI), Certificates, and Trust Models
6. Key Management, Distribution, and Lifecycle
7. Cryptographic Applications: TLS/SSL, IPsec, SSH, and Wireless Security
8. Cryptanalysis, Attacks, and Vulnerabilities
9. Emerging Technologies: Quantum Cryptography, Lightweight Cryptography, and
Homomorphic Encryption
10. Legal, Ethical, and Regulatory Considerations in Cryptography
Introduction
This comprehensive study guide is designed to provide focused preparation for the
WGU D830 Introduction to Cryptography Objective Assessment, covering both V1
and V2 versions. The assessment will evaluate your understanding of fundamental
cryptographic concepts, including symmetric and asymmetric encryption, hash
functions, digital signatures, and Public Key Infrastructure (PKI). You will be
challenged to apply theoretical knowledge to practical scenarios involving key
,management, secure communications, and cryptographic attacks. This guide aligns
with the PSY0/SY01 objectives and the latest 2026 updates, offering a robust review
of the critical knowledge required to succeed on the exam. Mastery of these topics
is essential for securing modern networks and understanding the cryptographic
underpinnings of information security.
Section One: Questions 1–200
1. What type of cryptographic system should be chosen to encrypt a large file
payload efficiently?
A. Symmetric Cryptography
B. Asymmetric Cryptography
C. Hash Function
D. Steganography
A. Symmetric Cryptography
RATIONALE: Symmetric encryption is computationally fast and highly efficient,
making it the proper choice for encrypting large amounts of bulk data . Asymmetric
encryption is slower due to complex mathematical operations and is typically
reserved for key exchange and digital signatures.
2. What is a hybrid cryptosystem?
A. A cipher that combines substitution and transposition
B. A system using asymmetric encryption to share a symmetric key, which then
encrypts the bulk payload
C. An encryption method that works on both local and cloud platforms
D. A tool running stream and block configurations simultaneously
B. A system using asymmetric encryption to share a symmetric key, which then
encrypts the bulk payload
RATIONALE: Hybrid systems (like HTTPS/TLS) combine the key-sharing
convenience of asymmetric ciphers with the high speed of symmetric ciphers .
,Asymmetric encryption secures the symmetric key during exchange, which then
encrypts the actual data.
3. What is the fixed bit length of an MD5 hash digest?
A. 64 bits
B. 128 bits
C. 160 bits
D. 256 bits
B. 128 bits
RATIONALE: The Message Digest 5 (MD5) algorithm produces a signature
output of exactly 128 bits, regardless of input volume . This is typically displayed as
a 32-character hexadecimal string.
4. What is the output length of the SHA-1 hash function?
A. 128 bits
B. 160 bits
C. 256 bits
D. 512 bits
B. 160 bits
RATIONALE: SHA-1 produces a 160-bit message digest . It is officially retired
from secure use due to practical collision demonstration exploits .
5. What cryptographic mechanism combines a hash function with a secret
symmetric key to provide both data integrity and data origin authentication?
A. Digital Signature
B. HMAC (Hash-Based Message Authentication Code)
C. Salted Hash
D. Key Derivation Function
B. HMAC (Hash-Based Message Authentication Code)
, RATIONALE: HMACs combine a hash function with a shared key, confirming
that data wasn't modified and validating that the sender knows the secret key . This
provides both integrity and authentication.
6. What data is added to plaintext passwords before hashing to defeat
precomputed Rainbow Table cracking attacks?
A. Initialization Vector
B. Digital Certificate
C. Salt
D. Nonce
C. Salt
RATIONALE: Salting adds unique, random characters to passwords prior to
hashing, ensuring identical passwords yield completely distinct hash outputs . This
renders precomputed rainbow tables ineffective.
7. In which type of attack does an adversary collect encrypted messages and
attempt to decrypt them without knowing anything about the plaintext or
algorithm?
A. Ciphertext-Only Attack
B. Known-Plaintext Attack
C. Chosen-Plaintext Attack
D. Side-Channel Attack
A. Ciphertext-Only Attack
RATIONALE: In a ciphertext-only scenario, the attacker lacks context, samples,
or control, making it the hardest cryptanalysis vector to execute . The attacker only
has access to the encrypted messages.
8. If an attacker intercepts a ciphertext string and also somehow obtains its
exact matching plaintext string, what kind of attack can they mount?
A. Ciphertext-Only Attack
B. Known-Plaintext Attack
