MACS SECTION 609 CERTIFICATION EXAM PRACTICE QUESTIONS
AND CORRECT ANSWERS (VERIFIED ANSWERS) PLUS
RATIONALES Q&A INSTANT DOWNLOAD PDF
138 QUESTIONS
TABLE OF CONTENTS
# TOPIC
1 Analyze and evaluate cryptographic primitives and protocols for real-world applications
2 Apply advanced threat modeling and risk assessment methodologies to complex network architectures
3 Synthesize knowledge of network protocols, operating systems, and application security to design robust
defense mechanisms
4 Critically assess emerging technologies and their security implications
5 MACS Section 609 Certification Exam Practice Questions And Correct Answers
6 Verified Answers
7 Plus Rationales Q&A Instant Download Pdf
8 Foundations of MACS Section 609 Certification - Advanced Cyber Operations and Cryptography
9 Applied MACS Section 609 Certification - Advanced Cyber Operations and Cryptography
10 Advanced MACS Section 609 Certification - Advanced Cyber Operations and Cryptography
11 MACS Section 609 Certification - Advanced Cyber Operations and Cryptography Review
Page 1
,Q1 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
A security architect is designing a zero-trust network for a large enterprise. Which
approach best aligns with the NIST Zero Trust Architecture (SP 800-207)
principles?
A. Implement a virtual private network (VPN) for all remote access, granting full network access
once authenticated.
B. Deploy micro-segmentation with per-application policies and enforce dynamic access
decisions based on user identity, device posture, and context. CORRECT
C. Use a demilitarized zone (DMZ) to isolate public-facing servers and trust the internal network
implicitly.
D. Implement a network access control (NAC) solution that checks endpoint compliance only at
the time of connection.
RATIONALE: NIST SP 800-207 emphasizes no implicit trust, continuous verification, and
granular access based on multiple attributes. Option B reflects these principles. VPNs (A) and
implicit trust (C) violate zero-trust. NAC (D) is a component but not the comprehensive strategy.
Q2 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
Given a Diffie-Hellman key exchange over a 2048-bit prime, which attack is most
feasible if the same private key is reused for multiple exchanges?
A. Small subgroup confinement attack CORRECT
B. Logjam attack
C. Offline dictionary attack
D. Bleichenbacher attack
RATIONALE: Reusing a private key across exchanges allows an attacker to perform a small
subgroup confinement attack by sending a generator of a small subgroup, thereby limiting the
shared secret to a small set and enabling offline recovery. The Logjam attack (B) exploits
export-grade primes, not key reuse. Dictionary attacks (C) apply to passwords, and
Bleichenbacher (D) targets RSA PKCS#1 v1.5.
Page 2
,Q3 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
Which technique is most appropriate for detecting and mitigating a slowloris
denial-of-service attack targeting a web server?
A. Rate-limiting the number of connections per source IP address.
B. Setting a minimum timeout for incomplete HTTP requests. CORRECT
C. Using a web application firewall (WAF) to filter malformed requests.
D. Increasing the server's maximum number of concurrent connections.
RATIONALE: Slowloris works by opening many connections and sending partial HTTP requests,
keeping them open. Setting a minimum timeout (or rather a short timeout) for incomplete
requests will close these idle connections, freeing resources. Rate-limiting (A) may be bypassed
by distributed sources, WAF (C) may not catch the low-and-slow pattern, and increasing
connections (D) exacerbates the problem.
Q4 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
In the context of a side-channel attack on an AES implementation, which
countermeasure is most effective against power analysis attacks?
A. Using a constant-time implementation that avoids secret-dependent branches.
B. Applying masking to intermediate values with random shares. CORRECT
C. Increasing the clock frequency of the processor.
D. Using a hardware random number generator for key generation.
RATIONALE: Masking randomizes intermediate values, breaking the statistical correlation
between power consumption and the secret key, which is the basis of power analysis.
Constant-time code (A) mitigates timing attacks, not power analysis. Clock frequency (C) does
not affect the leakage. Hardware RNG (D) is irrelevant to side-channel resistance.
Page 3
, Q5 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
Which of the following best describes the security property provided by a
message authentication code (MAC) when used in the Encrypt-then-MAC
construction?
A. Confidentiality of the plaintext.
B. Integrity and authenticity of the ciphertext. CORRECT
C. Non-repudiation of the sender.
D. Availability of the message.
RATIONALE: In Encrypt-then-MAC, the MAC is computed over the ciphertext, providing integrity
and authenticity of the ciphertext. Confidentiality (A) is provided by encryption. Non-repudiation
(C) requires digital signatures. Availability (D) is not a cryptographic property.
Q6 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
A penetration tester is analyzing a network that uses WPA2-PSK. Which attack is
most likely to succeed against this network?
A. KRACK attack
B. Downgrade to WEP
C. PMKID attack CORRECT
D. Evil twin attack
RATIONALE: WPA2-PSK is vulnerable to offline dictionary attacks using the PMKID, which can
be captured from a single beacon frame without an active client. KRACK (A) exploits the 4-way
handshake but requires client interaction and is more complex. Downgrade to WEP (B) is not
possible in modern networks. Evil twin (D) is a social engineering attack, not a direct
cryptographic break.
Page 4
AND CORRECT ANSWERS (VERIFIED ANSWERS) PLUS
RATIONALES Q&A INSTANT DOWNLOAD PDF
138 QUESTIONS
TABLE OF CONTENTS
# TOPIC
1 Analyze and evaluate cryptographic primitives and protocols for real-world applications
2 Apply advanced threat modeling and risk assessment methodologies to complex network architectures
3 Synthesize knowledge of network protocols, operating systems, and application security to design robust
defense mechanisms
4 Critically assess emerging technologies and their security implications
5 MACS Section 609 Certification Exam Practice Questions And Correct Answers
6 Verified Answers
7 Plus Rationales Q&A Instant Download Pdf
8 Foundations of MACS Section 609 Certification - Advanced Cyber Operations and Cryptography
9 Applied MACS Section 609 Certification - Advanced Cyber Operations and Cryptography
10 Advanced MACS Section 609 Certification - Advanced Cyber Operations and Cryptography
11 MACS Section 609 Certification - Advanced Cyber Operations and Cryptography Review
Page 1
,Q1 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
A security architect is designing a zero-trust network for a large enterprise. Which
approach best aligns with the NIST Zero Trust Architecture (SP 800-207)
principles?
A. Implement a virtual private network (VPN) for all remote access, granting full network access
once authenticated.
B. Deploy micro-segmentation with per-application policies and enforce dynamic access
decisions based on user identity, device posture, and context. CORRECT
C. Use a demilitarized zone (DMZ) to isolate public-facing servers and trust the internal network
implicitly.
D. Implement a network access control (NAC) solution that checks endpoint compliance only at
the time of connection.
RATIONALE: NIST SP 800-207 emphasizes no implicit trust, continuous verification, and
granular access based on multiple attributes. Option B reflects these principles. VPNs (A) and
implicit trust (C) violate zero-trust. NAC (D) is a component but not the comprehensive strategy.
Q2 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
Given a Diffie-Hellman key exchange over a 2048-bit prime, which attack is most
feasible if the same private key is reused for multiple exchanges?
A. Small subgroup confinement attack CORRECT
B. Logjam attack
C. Offline dictionary attack
D. Bleichenbacher attack
RATIONALE: Reusing a private key across exchanges allows an attacker to perform a small
subgroup confinement attack by sending a generator of a small subgroup, thereby limiting the
shared secret to a small set and enabling offline recovery. The Logjam attack (B) exploits
export-grade primes, not key reuse. Dictionary attacks (C) apply to passwords, and
Bleichenbacher (D) targets RSA PKCS#1 v1.5.
Page 2
,Q3 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
Which technique is most appropriate for detecting and mitigating a slowloris
denial-of-service attack targeting a web server?
A. Rate-limiting the number of connections per source IP address.
B. Setting a minimum timeout for incomplete HTTP requests. CORRECT
C. Using a web application firewall (WAF) to filter malformed requests.
D. Increasing the server's maximum number of concurrent connections.
RATIONALE: Slowloris works by opening many connections and sending partial HTTP requests,
keeping them open. Setting a minimum timeout (or rather a short timeout) for incomplete
requests will close these idle connections, freeing resources. Rate-limiting (A) may be bypassed
by distributed sources, WAF (C) may not catch the low-and-slow pattern, and increasing
connections (D) exacerbates the problem.
Q4 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
In the context of a side-channel attack on an AES implementation, which
countermeasure is most effective against power analysis attacks?
A. Using a constant-time implementation that avoids secret-dependent branches.
B. Applying masking to intermediate values with random shares. CORRECT
C. Increasing the clock frequency of the processor.
D. Using a hardware random number generator for key generation.
RATIONALE: Masking randomizes intermediate values, breaking the statistical correlation
between power consumption and the secret key, which is the basis of power analysis.
Constant-time code (A) mitigates timing attacks, not power analysis. Clock frequency (C) does
not affect the leakage. Hardware RNG (D) is irrelevant to side-channel resistance.
Page 3
, Q5 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
Which of the following best describes the security property provided by a
message authentication code (MAC) when used in the Encrypt-then-MAC
construction?
A. Confidentiality of the plaintext.
B. Integrity and authenticity of the ciphertext. CORRECT
C. Non-repudiation of the sender.
D. Availability of the message.
RATIONALE: In Encrypt-then-MAC, the MAC is computed over the ciphertext, providing integrity
and authenticity of the ciphertext. Confidentiality (A) is provided by encryption. Non-repudiation
(C) requires digital signatures. Availability (D) is not a cryptographic property.
Q6 ANALYZE AND EVALUATE CRYPTOGRAPHIC PRIMITIVES AND PROTOCOLS FOR
REAL-WORLD APPLICATIONS
A penetration tester is analyzing a network that uses WPA2-PSK. Which attack is
most likely to succeed against this network?
A. KRACK attack
B. Downgrade to WEP
C. PMKID attack CORRECT
D. Evil twin attack
RATIONALE: WPA2-PSK is vulnerable to offline dictionary attacks using the PMKID, which can
be captured from a single beacon frame without an active client. KRACK (A) exploits the 4-way
handshake but requires client interaction and is more complex. Downgrade to WEP (B) is not
possible in modern networks. Evil twin (D) is a social engineering attack, not a direct
cryptographic break.
Page 4
