WGU D334 Introduction to Cryptography
Pre-Assessment (PA) Mastery Examination
Exam Title: WGU D334 Introduction to Cryptography: Pre-Assessment Mastery Exam
Course: Introduction to Cryptography (D334) | Western Governors University
Total Questions: 350
Instructions: Select the best answer for each question. Each question includes the correct
answer and a comprehensive rationale.
SECTION 1: FOUNDATIONS AND CORE PRINCIPLES (Questions 1-30)
1. What is the primary purpose of cryptography?
A) To store data securely
B) To protect data confidentiality, integrity, and authenticity
C) To back up information
D) To manage network traffic
Answer: B
Rationale: Cryptography is used to secure communication and protect data by ensuring
confidentiality, integrity, and authenticity. While it also supports non-repudiation, these three are
the core goals. Data storage, backup, and network traffic management are not the primary
purposes of cryptography.
2. Which of the following is a symmetric encryption algorithm?
A) RSA
B) AES
C) ECC
D) Diffie-Hellman
Answer: B
Rationale: AES (Advanced Encryption Standard) is a symmetric encryption algorithm,
meaning it uses the same key for both encryption and decryption. RSA, ECC, and Diffie-
Hellman are asymmetric algorithms.
3. What is the main disadvantage of symmetric encryption?
A) It is slower than asymmetric encryption
B) Key distribution is difficult
,C) It provides no confidentiality
D) It uses large key sizes
Answer: B
Rationale: The primary disadvantage of symmetric encryption is key distribution — securely
sharing the same secret key with all intended parties. Symmetric encryption is actually faster
than asymmetric, does provide confidentiality, and generally uses smaller key sizes.
4. According to Kerckhoffs's Principle, what should the security of a cryptosystem depend on?
A) The secrecy of the encryption algorithm
B) The complexity of the mathematics
C) The secrecy of the key
D) The length of the plaintext
Answer: C
Rationale: Kerckhoffs's Principle states, "A cryptosystem should be secure even if everything
about the system, except the key, is public." Security through obscurity (hiding the algorithm) is
a fatal flaw because reverse engineering or leaks expose the system entirely.
5. What is the primary goal of cryptography?
A) Data compression
B) Data confidentiality
C) Data visualization
D) Data archiving
Answer: B
Rationale: The primary goal of cryptography is data confidentiality, though it also supports
integrity, authentication, and non-repudiation. The four core goals are confidentiality, integrity,
authentication, and non-repudiation. Obfuscation is not a standard cryptographic goal.
6. Which concept ensures that a single-bit change in the plaintext results in approximately half
of the ciphertext bits changing?
A) Confusion
B) Diffusion
C) Non-repudiation
D) Collision resistance
Answer: B
Rationale: Shannon identified two methods to thwart cryptanalysis: Confusion (making the
key-ciphertext relationship complex) and Diffusion (spreading the influence of one plaintext bit
over many ciphertext bits). The avalanche effect is a result of diffusion.
, 7. What is the primary practical limitation of the One-Time Pad (OTP)?
A) It is vulnerable to brute-force attacks
B) It requires the key to be shared via asymmetric encryption
C) The key must be as long as the message and truly random
D) It only works with binary data
Answer: C
Rationale: While perfectly secure, OTP requires a key at least as long as the message, the
key must be truly random, and each key can only be used once. The logistics of securely
distributing such massive keys make it impractical for most applications.
8. In cryptographic design, what is the primary purpose of a "nonce"?
A) To provide a static identifier for the encryption algorithm
B) To compress the plaintext for faster transmission
C) To ensure freshness and prevent replay attacks
D) To increase the key length
Answer: C
Rationale: A nonce (number used once) is a value that ensures freshness and prevents
replay attacks by guaranteeing that each message or session is unique. It is not used for
compression, static identification, or key length extension.
9. A security auditor notes that a company relies on hiding their proprietary encryption
algorithm to ensure security. According to Kerckhoffs's Principle, what is the primary flaw in this
approach?
A) Secret algorithms are usually slower than public ones
B) The algorithm cannot be exported due to ITAR regulations
C) The security collapses if the algorithm is reverse-engineered
D) Hidden algorithms cannot use modern key lengths
Answer: C
Rationale: Kerckhoffs's Principle dictates that a cryptosystem should be secure even if
everything about the system, except the key, is public. Relying on the secrecy of the algorithm
("Security through Obscurity") is a fatal flaw because reverse engineering or leaks expose the
system entirely.
10. A cryptanalyst finds a repeated sequence of characters "KXD" in a ciphertext 18
characters apart, and another sequence "LGH" 36 characters apart. Which classical
cryptanalysis technique is being applied?
, A) Frequency Analysis
B) Index of Coincidence
C) Kasiski Examination
D) Meet-in-the-Middle
Answer: C
Rationale: The Kasiski Examination looks for repeating strings in the ciphertext to guess the
length of the keyword in polyalphabetic ciphers like Vigenère. The greatest common divisor
(GCD) of the distances (18, 36) is 18.
11. The One-Time Pad (OTP) is mathematically proven to be perfectly secure. What is the
primary practical limitation that prevents its widespread use?
A) It is vulnerable to brute-force attacks
B) It requires the key to be shared via asymmetric encryption
C) The key must be as long as the message and truly random
D) It only works with binary data
Answer: C
Rationale: While perfectly secure, OTP requires a key at least as long as the message, the
key must be truly random, and each key can only be used once. The logistics of securely
distributing such massive keys make it impractical.
12. In cryptographic design, what is the primary purpose of a "nonce"?
A) To provide a static identifier for the encryption algorithm
B) To compress the plaintext for faster transmission
C) To ensure freshness and prevent replay attacks
D) To increase the key length
Answer: C
Rationale: A nonce ensures freshness and prevents replay attacks by guaranteeing each
message or session is unique. It is not used for compression, static identification, or key length
extension.
13. What is the primary purpose of the "diffusion" property in a secure cipher?
A) To obscure the relationship between the key and the ciphertext
B) To spread the influence of a single plaintext bit over many ciphertext bits
C) To compress the data for faster transmission
D) To ensure the key is exactly the same length as the message
Answer: B
Pre-Assessment (PA) Mastery Examination
Exam Title: WGU D334 Introduction to Cryptography: Pre-Assessment Mastery Exam
Course: Introduction to Cryptography (D334) | Western Governors University
Total Questions: 350
Instructions: Select the best answer for each question. Each question includes the correct
answer and a comprehensive rationale.
SECTION 1: FOUNDATIONS AND CORE PRINCIPLES (Questions 1-30)
1. What is the primary purpose of cryptography?
A) To store data securely
B) To protect data confidentiality, integrity, and authenticity
C) To back up information
D) To manage network traffic
Answer: B
Rationale: Cryptography is used to secure communication and protect data by ensuring
confidentiality, integrity, and authenticity. While it also supports non-repudiation, these three are
the core goals. Data storage, backup, and network traffic management are not the primary
purposes of cryptography.
2. Which of the following is a symmetric encryption algorithm?
A) RSA
B) AES
C) ECC
D) Diffie-Hellman
Answer: B
Rationale: AES (Advanced Encryption Standard) is a symmetric encryption algorithm,
meaning it uses the same key for both encryption and decryption. RSA, ECC, and Diffie-
Hellman are asymmetric algorithms.
3. What is the main disadvantage of symmetric encryption?
A) It is slower than asymmetric encryption
B) Key distribution is difficult
,C) It provides no confidentiality
D) It uses large key sizes
Answer: B
Rationale: The primary disadvantage of symmetric encryption is key distribution — securely
sharing the same secret key with all intended parties. Symmetric encryption is actually faster
than asymmetric, does provide confidentiality, and generally uses smaller key sizes.
4. According to Kerckhoffs's Principle, what should the security of a cryptosystem depend on?
A) The secrecy of the encryption algorithm
B) The complexity of the mathematics
C) The secrecy of the key
D) The length of the plaintext
Answer: C
Rationale: Kerckhoffs's Principle states, "A cryptosystem should be secure even if everything
about the system, except the key, is public." Security through obscurity (hiding the algorithm) is
a fatal flaw because reverse engineering or leaks expose the system entirely.
5. What is the primary goal of cryptography?
A) Data compression
B) Data confidentiality
C) Data visualization
D) Data archiving
Answer: B
Rationale: The primary goal of cryptography is data confidentiality, though it also supports
integrity, authentication, and non-repudiation. The four core goals are confidentiality, integrity,
authentication, and non-repudiation. Obfuscation is not a standard cryptographic goal.
6. Which concept ensures that a single-bit change in the plaintext results in approximately half
of the ciphertext bits changing?
A) Confusion
B) Diffusion
C) Non-repudiation
D) Collision resistance
Answer: B
Rationale: Shannon identified two methods to thwart cryptanalysis: Confusion (making the
key-ciphertext relationship complex) and Diffusion (spreading the influence of one plaintext bit
over many ciphertext bits). The avalanche effect is a result of diffusion.
, 7. What is the primary practical limitation of the One-Time Pad (OTP)?
A) It is vulnerable to brute-force attacks
B) It requires the key to be shared via asymmetric encryption
C) The key must be as long as the message and truly random
D) It only works with binary data
Answer: C
Rationale: While perfectly secure, OTP requires a key at least as long as the message, the
key must be truly random, and each key can only be used once. The logistics of securely
distributing such massive keys make it impractical for most applications.
8. In cryptographic design, what is the primary purpose of a "nonce"?
A) To provide a static identifier for the encryption algorithm
B) To compress the plaintext for faster transmission
C) To ensure freshness and prevent replay attacks
D) To increase the key length
Answer: C
Rationale: A nonce (number used once) is a value that ensures freshness and prevents
replay attacks by guaranteeing that each message or session is unique. It is not used for
compression, static identification, or key length extension.
9. A security auditor notes that a company relies on hiding their proprietary encryption
algorithm to ensure security. According to Kerckhoffs's Principle, what is the primary flaw in this
approach?
A) Secret algorithms are usually slower than public ones
B) The algorithm cannot be exported due to ITAR regulations
C) The security collapses if the algorithm is reverse-engineered
D) Hidden algorithms cannot use modern key lengths
Answer: C
Rationale: Kerckhoffs's Principle dictates that a cryptosystem should be secure even if
everything about the system, except the key, is public. Relying on the secrecy of the algorithm
("Security through Obscurity") is a fatal flaw because reverse engineering or leaks expose the
system entirely.
10. A cryptanalyst finds a repeated sequence of characters "KXD" in a ciphertext 18
characters apart, and another sequence "LGH" 36 characters apart. Which classical
cryptanalysis technique is being applied?
, A) Frequency Analysis
B) Index of Coincidence
C) Kasiski Examination
D) Meet-in-the-Middle
Answer: C
Rationale: The Kasiski Examination looks for repeating strings in the ciphertext to guess the
length of the keyword in polyalphabetic ciphers like Vigenère. The greatest common divisor
(GCD) of the distances (18, 36) is 18.
11. The One-Time Pad (OTP) is mathematically proven to be perfectly secure. What is the
primary practical limitation that prevents its widespread use?
A) It is vulnerable to brute-force attacks
B) It requires the key to be shared via asymmetric encryption
C) The key must be as long as the message and truly random
D) It only works with binary data
Answer: C
Rationale: While perfectly secure, OTP requires a key at least as long as the message, the
key must be truly random, and each key can only be used once. The logistics of securely
distributing such massive keys make it impractical.
12. In cryptographic design, what is the primary purpose of a "nonce"?
A) To provide a static identifier for the encryption algorithm
B) To compress the plaintext for faster transmission
C) To ensure freshness and prevent replay attacks
D) To increase the key length
Answer: C
Rationale: A nonce ensures freshness and prevents replay attacks by guaranteeing each
message or session is unique. It is not used for compression, static identification, or key length
extension.
13. What is the primary purpose of the "diffusion" property in a secure cipher?
A) To obscure the relationship between the key and the ciphertext
B) To spread the influence of a single plaintext bit over many ciphertext bits
C) To compress the data for faster transmission
D) To ensure the key is exactly the same length as the message
Answer: B
