ICT 394 Quiz Session 02 | Questions and Correct Answers | 2026
Update | myMurdoch Learning | 100% Score - 115 Questions and
Answers Already Graded A+ Premium Exam Tested And
Verified
Subject Area Information and Communication Technology
Description This exam covers advanced topics in ICT security, including cryptography,
network defense, risk assessment, and secure systems design. Designed to test
deep conceptual understanding and application to complex scenarios.
Expected Grade A+
Total Questions 115
Duration 3 hours
Learning Outcomes 1. Analyze and mitigate complex cybersecurity threats
2. Design secure network architectures
3. Evaluate cryptographic protocols for real-world systems
4. Apply risk management frameworks to enterprise ICT environments
Accreditation Conforms to ABET and NSA/DHS Centers of Academic Excellence in Cyber
Defense (CAE-CD) standards
Page 1
,Question 1 of 115
In the context of RSA encryption, given two distinct primes p=17 and q=23, an encryption exponent
e=7, and a plaintext m=5 (co-prime to n), what is the corresponding ciphertext?
A. 391
B. 295
C. 112
D. 213
The correct answer is:
Correct Action: 295
Rationales
• 295 (Correct):
This is the correct action. n = p*q = 391. (n) = (p-1)*(q-1) = 16*22 = 352. Ciphertext c = m^e mod n = 5^7 mod 391.
5^2=25, 5^4=625 mod 391 = 234, 5^7 = 5^4 * 5^2 * 5 = 234*25*5 = 29250 mod 391 = 295. Option B is correct. Other
options are incorrect modulo calculations.
• 391 (Incorrect):
This option is not appropriate. (n) = (p-1)*(q-1) = 16*22 = 352. Ciphertext c = m^e mod n = 5^7 mod 391
• 112 (Incorrect):
This option is not appropriate. (n) = (p-1)*(q-1) = 16*22 = 352. Ciphertext c = m^e mod n = 5^7 mod 391
• 213 (Incorrect):
This option is not appropriate. (n) = (p-1)*(q-1) = 16*22 = 352. Ciphertext c = m^e mod n = 5^7 mod 391
Page 2
,Question 2 of 115
Which of the following best describes the primary security weakness of the Wired Equivalent
Privacy (WEP) protocol that made it deprecated?
A. Reuse of initialization vectors leading to key recovery attacks
B. Absence of integrity checks allowing frame injection
C. Use of a static pre-shared key without rotation
D. Vulnerability to brute-force attacks due to short key length
The correct answer is:
Correct Action: Reuse of initialization vectors leading to key recovery attacks
Rationales
• Reuse of initialization vectors leading to key recovery attacks (Correct):
This is the correct action. WEP's main flaw is the reuse of 24-bit IVs, which leads to keystream reuse and allows an
attacker to recover the RC4 key using statistical attacks (e.g., FMS attack). While B, C, and D are also weaknesses, the IV
reuse is the most fundamental and exploited vulnerability. Integrity checks are present but weak (CRC-32), and key length
• Absence of integrity checks allowing frame injection (Incorrect):
This option is not appropriate. g., FMS attack)
• Use of a static pre-shared key without rotation (Incorrect):
This option is not appropriate. g., FMS attack)
• Vulnerability to brute-force attacks due to short key length (Incorrect):
This option is not appropriate. g., FMS attack)
Page 3
, Question 3 of 115
In a public key infrastructure (PKI), what is the primary purpose of a Certificate Revocation List
(CRL) compared to Online Certificate Status Protocol (OCSP)?
A. CRLs provide real-time revocation status, while OCSP relies on periodic updates
B. CRLs are used only for intermediate CAs, while OCSP is for end-entity certificates
C. CRLs are signed lists of revoked certificates distributed periodically, whereas OCSP provides real-time query
responses
D. CRLs are less secure because they are not signed by the CA
The correct answer is:
Correct Action: CRLs are signed lists of revoked certificates distributed periodically, whereas OCSP
provides real-time query responses
Rationales
• CRLs are signed lists of revoked certificates distributed periodically, whereas OCSP provides real-time query
responses (Correct):
This is the correct action. A CRL is a signed, timestamped list of revoked certificates issued by a CA, distributed
periodically. OCSP allows a client to query the CA's server in real-time to check a certificate's status. The key difference is
the distribution model: CRL is batch/pull, OCSP is per-query. Others are incorrect; both services use CA signatures.
• CRLs provide real-time revocation status, while OCSP relies on periodic updates (Incorrect):
This option is not appropriate. OCSP allows a client to query the CA's server in real-time to check a certificate's status. The
key difference is the distribution model: CRL is batch/pull, OCSP is per-query
• CRLs are used only for intermediate CAs, while OCSP is for end-entity certificates (Incorrect):
This option is not appropriate. OCSP allows a client to query the CA's server in real-time to check a certificate's status. The
key difference is the distribution model: CRL is batch/pull, OCSP is per-query
• CRLs are less secure because they are not signed by the CA (Incorrect):
This option is not appropriate. OCSP allows a client to query the CA's server in real-time to check a certificate's status. The
key difference is the distribution model: CRL is batch/pull, OCSP is per-query
Page 4
Update | myMurdoch Learning | 100% Score - 115 Questions and
Answers Already Graded A+ Premium Exam Tested And
Verified
Subject Area Information and Communication Technology
Description This exam covers advanced topics in ICT security, including cryptography,
network defense, risk assessment, and secure systems design. Designed to test
deep conceptual understanding and application to complex scenarios.
Expected Grade A+
Total Questions 115
Duration 3 hours
Learning Outcomes 1. Analyze and mitigate complex cybersecurity threats
2. Design secure network architectures
3. Evaluate cryptographic protocols for real-world systems
4. Apply risk management frameworks to enterprise ICT environments
Accreditation Conforms to ABET and NSA/DHS Centers of Academic Excellence in Cyber
Defense (CAE-CD) standards
Page 1
,Question 1 of 115
In the context of RSA encryption, given two distinct primes p=17 and q=23, an encryption exponent
e=7, and a plaintext m=5 (co-prime to n), what is the corresponding ciphertext?
A. 391
B. 295
C. 112
D. 213
The correct answer is:
Correct Action: 295
Rationales
• 295 (Correct):
This is the correct action. n = p*q = 391. (n) = (p-1)*(q-1) = 16*22 = 352. Ciphertext c = m^e mod n = 5^7 mod 391.
5^2=25, 5^4=625 mod 391 = 234, 5^7 = 5^4 * 5^2 * 5 = 234*25*5 = 29250 mod 391 = 295. Option B is correct. Other
options are incorrect modulo calculations.
• 391 (Incorrect):
This option is not appropriate. (n) = (p-1)*(q-1) = 16*22 = 352. Ciphertext c = m^e mod n = 5^7 mod 391
• 112 (Incorrect):
This option is not appropriate. (n) = (p-1)*(q-1) = 16*22 = 352. Ciphertext c = m^e mod n = 5^7 mod 391
• 213 (Incorrect):
This option is not appropriate. (n) = (p-1)*(q-1) = 16*22 = 352. Ciphertext c = m^e mod n = 5^7 mod 391
Page 2
,Question 2 of 115
Which of the following best describes the primary security weakness of the Wired Equivalent
Privacy (WEP) protocol that made it deprecated?
A. Reuse of initialization vectors leading to key recovery attacks
B. Absence of integrity checks allowing frame injection
C. Use of a static pre-shared key without rotation
D. Vulnerability to brute-force attacks due to short key length
The correct answer is:
Correct Action: Reuse of initialization vectors leading to key recovery attacks
Rationales
• Reuse of initialization vectors leading to key recovery attacks (Correct):
This is the correct action. WEP's main flaw is the reuse of 24-bit IVs, which leads to keystream reuse and allows an
attacker to recover the RC4 key using statistical attacks (e.g., FMS attack). While B, C, and D are also weaknesses, the IV
reuse is the most fundamental and exploited vulnerability. Integrity checks are present but weak (CRC-32), and key length
• Absence of integrity checks allowing frame injection (Incorrect):
This option is not appropriate. g., FMS attack)
• Use of a static pre-shared key without rotation (Incorrect):
This option is not appropriate. g., FMS attack)
• Vulnerability to brute-force attacks due to short key length (Incorrect):
This option is not appropriate. g., FMS attack)
Page 3
, Question 3 of 115
In a public key infrastructure (PKI), what is the primary purpose of a Certificate Revocation List
(CRL) compared to Online Certificate Status Protocol (OCSP)?
A. CRLs provide real-time revocation status, while OCSP relies on periodic updates
B. CRLs are used only for intermediate CAs, while OCSP is for end-entity certificates
C. CRLs are signed lists of revoked certificates distributed periodically, whereas OCSP provides real-time query
responses
D. CRLs are less secure because they are not signed by the CA
The correct answer is:
Correct Action: CRLs are signed lists of revoked certificates distributed periodically, whereas OCSP
provides real-time query responses
Rationales
• CRLs are signed lists of revoked certificates distributed periodically, whereas OCSP provides real-time query
responses (Correct):
This is the correct action. A CRL is a signed, timestamped list of revoked certificates issued by a CA, distributed
periodically. OCSP allows a client to query the CA's server in real-time to check a certificate's status. The key difference is
the distribution model: CRL is batch/pull, OCSP is per-query. Others are incorrect; both services use CA signatures.
• CRLs provide real-time revocation status, while OCSP relies on periodic updates (Incorrect):
This option is not appropriate. OCSP allows a client to query the CA's server in real-time to check a certificate's status. The
key difference is the distribution model: CRL is batch/pull, OCSP is per-query
• CRLs are used only for intermediate CAs, while OCSP is for end-entity certificates (Incorrect):
This option is not appropriate. OCSP allows a client to query the CA's server in real-time to check a certificate's status. The
key difference is the distribution model: CRL is batch/pull, OCSP is per-query
• CRLs are less secure because they are not signed by the CA (Incorrect):
This option is not appropriate. OCSP allows a client to query the CA's server in real-time to check a certificate's status. The
key difference is the distribution model: CRL is batch/pull, OCSP is per-query
Page 4
