Cryptography Quiz
Fred adds the value 89EA443CCDA16B89 to every password as a salt.
What issue might this cause? - CORRECT ANSWER-The salt is reused.
Which one of the following certificate formats is closely associated with
Windows binary certificate files? - CORRECT ANSWER-PFX
Amanda wants to use a digital signature on an email she is sending to
Maria. Which key should she use to sign the email? - CORRECT
ANSWER-Amanda's private key
What certificate is most likely to be used by an offline certificate authority
(CA)? - CORRECT ANSWER-Root
Acme Widgets has 10 employees and they all need the ability to
communicate with one another using a symmetric encryption system.
The system should allow any two employees to securely communicate
without other employees eavesdropping. If an 11th employee is added to
the organization, how many new keys must be added to the system? -
CORRECT ANSWER-10
Nick wants to make an encryption key harder to crack, and he increases
the key length by one bit from a 128-bit encryption key to a 129-bit
encryption key as an example to explain the concept. How much more
work would an attacker have to do to crack the key using brute force if
no other attacks or techniques could be applied? - CORRECT
ANSWER-Twice as much
What occurs when a certificate is stapled? - CORRECT ANSWER-Both
the certificate and OCSP responder are sent together to prevent
additional retrievals during certificate path validation
Samantha is looking for an authentication method that incorporates the
X.509 standard and will allow authentication to be digitally signed. Which
of the following authentication methods would best meet these
requirements? - CORRECT ANSWER-Certificate-based authentication
, Which one of the following servers is almost always an offline CA in a
large PKI deployment? - CORRECT ANSWER-Root CA
Alaina wants to use a password cracker against hashed passwords.
Which of the following items is most important for her to know before she
does this? - CORRECT ANSWER-The hashing method used for the
passwords
Ian wants to send an encrypted message to Michelle using public key
cryptography. What key does he need to encrypt the message? -
CORRECT ANSWER-Her public key
Derek wants to explain the concept of resource constraints driving
security constraints when using encryption. Which of the following
descriptions best explains the trade-offs that he should explain to his
management? - CORRECT ANSWER-Stronger encryption requires
more computational resources, requiring a balance between speed and
security.
Amanda wants to ensure that the message she is sending remains
confidential. What should she do to ensure this? - CORRECT
ANSWER-Encrypt the message
Edward is responsible for web application security at a large insurance
company. One of the applications that he is particularly concerned about
is used by insurance adjusters in the field. He wants to have strong
authentication methods to mitigate misuse of the application. What
would be his best choice? - CORRECT ANSWER-Authenticate the client
with a digital certificate.
As part of the certificate issuance process from the CA that her company
works with, Marie is required to prove that she is a valid representative
of her company. The CA goes through additional steps to ensure that
she is who she says she is and that her company is legitimate, and not
all CAs can issue this type of certificate. What type of certificate has she
been issued? - CORRECT ANSWER-An EV certificate
Fred adds the value 89EA443CCDA16B89 to every password as a salt.
What issue might this cause? - CORRECT ANSWER-The salt is reused.
Which one of the following certificate formats is closely associated with
Windows binary certificate files? - CORRECT ANSWER-PFX
Amanda wants to use a digital signature on an email she is sending to
Maria. Which key should she use to sign the email? - CORRECT
ANSWER-Amanda's private key
What certificate is most likely to be used by an offline certificate authority
(CA)? - CORRECT ANSWER-Root
Acme Widgets has 10 employees and they all need the ability to
communicate with one another using a symmetric encryption system.
The system should allow any two employees to securely communicate
without other employees eavesdropping. If an 11th employee is added to
the organization, how many new keys must be added to the system? -
CORRECT ANSWER-10
Nick wants to make an encryption key harder to crack, and he increases
the key length by one bit from a 128-bit encryption key to a 129-bit
encryption key as an example to explain the concept. How much more
work would an attacker have to do to crack the key using brute force if
no other attacks or techniques could be applied? - CORRECT
ANSWER-Twice as much
What occurs when a certificate is stapled? - CORRECT ANSWER-Both
the certificate and OCSP responder are sent together to prevent
additional retrievals during certificate path validation
Samantha is looking for an authentication method that incorporates the
X.509 standard and will allow authentication to be digitally signed. Which
of the following authentication methods would best meet these
requirements? - CORRECT ANSWER-Certificate-based authentication
, Which one of the following servers is almost always an offline CA in a
large PKI deployment? - CORRECT ANSWER-Root CA
Alaina wants to use a password cracker against hashed passwords.
Which of the following items is most important for her to know before she
does this? - CORRECT ANSWER-The hashing method used for the
passwords
Ian wants to send an encrypted message to Michelle using public key
cryptography. What key does he need to encrypt the message? -
CORRECT ANSWER-Her public key
Derek wants to explain the concept of resource constraints driving
security constraints when using encryption. Which of the following
descriptions best explains the trade-offs that he should explain to his
management? - CORRECT ANSWER-Stronger encryption requires
more computational resources, requiring a balance between speed and
security.
Amanda wants to ensure that the message she is sending remains
confidential. What should she do to ensure this? - CORRECT
ANSWER-Encrypt the message
Edward is responsible for web application security at a large insurance
company. One of the applications that he is particularly concerned about
is used by insurance adjusters in the field. He wants to have strong
authentication methods to mitigate misuse of the application. What
would be his best choice? - CORRECT ANSWER-Authenticate the client
with a digital certificate.
As part of the certificate issuance process from the CA that her company
works with, Marie is required to prove that she is a valid representative
of her company. The CA goes through additional steps to ensure that
she is who she says she is and that her company is legitimate, and not
all CAs can issue this type of certificate. What type of certificate has she
been issued? - CORRECT ANSWER-An EV certificate
