MSIS 4123 TEST OO1 QUESTIONS AND CORRECT ANSWERS.

MSIS 4123 TEST OO1 QUESTIONS AND CORRECT ANSWERS. advanced encryption standard - Answer-2001-now; replaced des, rijndeal won affect - Answer-to change something; a verb algorithm - Answer-a set of steps to process something; rules for enciphering and deciphering; a recipe anxious - Answer-generally tense, unpleasant emotion in anticipation of an uncertain or negative event api - Answer-any general programming interface; a provided, allowed way to programmatically interact with another piece of software asymmetric encryption - Answer-two keys, either can be used to encrypt or decrypt but only the other key can do the reverse. key 1 encrypts then only key 2 can decrypt, and vice versa attack - Answer-exploiting a vulnerability to cause harm or loss authentication - Answer-like a password, verifying that you are who yo identified yourself as authenticity - Answer-the user is personally identified basic methods of risk management - Answer-prevent deter deflect detect recover black hat hacker - Answer-a "bad" hacker block - Answer-an outsider threat that stops the recipient from getting the sender's message; affects availability book cipher - Answer-book is used, code refers to letters or words from book to use for decryption; beale cipher is an example capi - Answer-older microsoft crypto api carrier - Answer-the normal message, data, picture that hides the secret message in steganography ceaser cipher - Answer-shift cipher; shift of 3 certificate authority (ca) - Answer-issuer of asymmetric key pair in a pki; digital signs the public key certificate; may be part of a CA chain certificate revocation list (crl) - Answer-list of certificates that have gone bad before their expiration date certificate serial number - Answer-used to identify certificates certificate signature algorithm - Answer-shows the type of hash and public key encryption used in making the CA's digital signature certificate signature value - Answer-the CAs digital signature certificate valid dates - Answer-certificate will only work between these dates; shouldn't be a long time cia - Answer-confidentiality integrity availability cipher suite - Answer-the combination of specific kinds of asymmetric encryption, symmetric encryption, and hashing to be used between a browser and a web site for secure (https) communication cissp - Answer-certified information systems security professional (cissp) certification for ia. for individuals, most well-known claude shannon - Answer-father of information theory, digital computer theory, digital circuit theory cng - Answer-the new microsoft crypto api, uses ecc; integrates with smart cards cnss - Answer-committee on national security systems. has education certifications including nstissi-4011 which is this class color laser printers & yellow dots - Answer-these printers use tiny yellow dots to watermark each paper sheet with information about the printer, time printed, etc. competitors to aes - Answer-serpent, twofish, rc6 computer crime - Answer-any crime involving or aided by the use of a computer computing system elements - Answer-computing system hardware software storage media data networks people confusion - Answer-changing one character in plaintext should totally change the ciphertext control - Answer-a counter to a vulnerability; reduces or removes the vulnerability cracker - Answer-an outdated term for a "bad" hacker cryptanalysis goals - Answer-break one message break the decryption algorithm infer meaning without breaking the algorithm deduce the key find weakness in how encryption is actually done find weakness in the algorithm with using messages cryptanalyst - Answer-person who studies encryption crypto conventions - Answer-plaintext, ciphertext, a=0, z=25, z+2=b cryptographer - Answer-someone who works for a legitimate sender to encode/decode their messages cryptography - Answer-hidden writing cryptology - Answer-research into encryption and decryption cryptosystem - Answer-any system that encrypts and decrypts crytographer - Answer-someone who works for a legitimate sender to encode/decode their messages d-wave - Answer-company that claims to have a working quantum computer; works with google; has a very limited quantum processor data encryption standard (des) - Answer-national symmetric encryption standard , ibm won decryption - Answer-transforming an encrypted message to plaintext aka decoding, deciphering defense in depth - Answer-multiple layers of varying forms of defense diffie-hellman (d-h) facts - Answer-first implementation of public key exchange can only generate a key new key used for each new interaction may be time to stop using it diffusion - Answer-the plaintext should be spread all over the ciphertext; opposite of the "wheel of fortune" effect digital signature - Answer-the result of a digital object being hashed, and that hash being encrypted with the owner's private key; can be embedded in some things like pdf or word but not with a plain text file digital watermark - Answer-embedded bytes in a digital object (mp3, pdf, etc) that provide information (copyright holder, download date, etc.) digram/trigram - Answer-common sets of 2 or 3 letters that appear often in words disgruntled employees - Answer-common amateur computer criminals; almost always caught double-slit experiment - Answer-important experiment that showed that sub-atomic particles exist in superposition until observed eager - Answer-positive emotion anticipating a good event ease of use - Answer-the user's perceived difficulty of using a technology ecc - Answer-elliptic curve cryptography small key size than rsa ecc used for random numbers compromised by nsa (dual_ec_drbg) effect - Answer-the result of a cause; an outcome. a noun electronic key exchange - Answer-using asymmetric encryption to generate or create then encrypt a key for use in symmetric encryption elements of information assurance (burkman) - Answer-vulnerability controls risk and management development core knowledge and supporting areas threat detection and response enforcement elgamal - Answer-based on discrete logarithms over finite fields us gov't standard for digital signatures encoding density - Answer-the percentage of the payload in the carrier encryption - Answer-converting a plaintext message into a message that cannot be read by the outsider that can be read by the intended recipient. aka encoding, enciphering error propagation - Answer-one mistake ruins everything afterwards extended validation (ev) certificate - Answer-provides extra consumer notification capabilities, like a green color in the browser address bar fabrication - Answer-an outsider threat where the message falsely appears to be from the sender. affects communications integrity grill cipher - Answer-a sheet with holes, when laid over a page of text reveals the secret message hashing - Answer-an integrity check; submitting a digital object to a one-way math function; md5, sha1, sha2 hashing - Answer-an integrity check; submitting a digital object to a one-way math function; md5, sha1, sha2 hexadecimal string - Answer-a common way to show a bunch of binary date; more compact hierarchial certificate path - Answer-some CAs can create other CAs, etc. to verify any CA other than a root CA each CA up the path must be verified how is asymmetric encryption used? - Answer-to generate or share a key for symmetric encryption identification - Answer-access is proven valid, but the person is unknown intercept - Answer-an outsider attack where the confidentiality of the sender's message is compromised iso 27001:2013 - Answer-international standards organization certificate for information assurance. for organizations, not individuals key - Answer-a shared secret; password; used in combination with an algorithm to encrypt and decrypt key escrow - Answer-a third party such as the government holds a copy of the private key least significant bit - Answer-in a binary byte (8 bits), the last bit; changing it makes the value +/- 1 so not big linguistic steganography - Answer-hiding a message in a non-obvious way but open way; includes semagrams and open codes lucifer - Answer-ibm's winning encryption algorithm that became des magnetic remanance - Answer-data on hard drives can still be there being written over once man in the middle (mitm) - Answer-any communication attack where a third part intercepts communications then passes them on the legitimate receiver master file table - Answer-holds pointers to files. when a file is deleted these pointers are erased rather than the file. file is eventually overwritten mc4 - Answer-most popular md5 - Answer-hashing algorithm for 32 bit machines, 128 bit hash military domains - Answer-air land sea space cyberspace modification - Answer-an outsider threat where the integrity of the message is compromised mom - Answer-elements of an attack: method opportunity motive (different for hackers) multi-domain certificate - Answer-allows for subject alternate names (SANs); can secure multiple domains, sites and subdomains with one certificate nobus - Answer-NObody But US nsa belief that they have no duty to report vulnerabilities that they think nobody else can exploit non-repudiation - Answer-the user cannot deny that they performed the transaction null ciphr - Answer-reading every 5th word, or 4th character, etc. of a legitimate carrier to reveal the message one-time pad - Answer-like vernam cipher by pad of single sheets if keys on sheets are truly random is unbreakable hard to share the pads one-way function - Answer-a mathematical process where an input creates an output but the input cannot be derived from the output open codes - Answer-hide the message in a legitimate carrier message either by in-group words (jargon code) or selecting parts of the legitimate message (covered ciphers) openssl - Answer-popular open source pki; does symmetric and asymmetric encryption; can be accessed programatically package (steganography) - Answer-the combination of the payload and carrier parallelism - Answer-making a lot of calculations all at once, rather than sequentially; qubits allow for massive parallelism payload - Answer-the secret to be hidden in steganography perceived usefulness - Answer-the user's perception of how much using a technology will help him in their work pkcs #11 - Answer-common multi-platform crypto api pki - Answer-public key infrastructure; a system to generate and manage public and private keys policy - Answer-a broad statement about an organization's view private key - Answer-one of the asymmetric keys; held by the owner procedures - Answer-detailed instructions to perform a task professional hacker - Answer-well-trained, organized criminal who uses computer technology to perform crimes pseudo-random - Answer-the kind of random computers generate. not really random, can be repeated if same "seed" value is used public key - Answer-one of the asymmetric keys; made accessib