WGU D830/D334 OBJECTIVE ASSESSMENT FINAL NEWEST
2026 ACTUAL EXAM TEST BANK | WGU D830/D334 INTRO TO
CRYPTOGRAPHY OA FINAL REVIEW WITH 250 REAL EXAM
QUESTIONS AND CORRECT VERIFIED ANSWERS/ ALREADY
GRADED A+ (MOST RECENT!!)
Core Domains
1. Foundations of Cryptography and Cryptographic Principles
2. Symmetric Encryption and Block/Stream Ciphers
3. Asymmetric Cryptography and Key Exchange
4. Hashing, MACs, and Digital Signatures
5. Protocols, PKI, Attacks, and Applications
6. Classical Cryptography and Historical Ciphers
7. Key Management and Certificate Lifecycle
8. Network Security and Wireless Protocols
9. Cryptographic Attacks and Threat Models
10. Post-Quantum Cryptography and Emerging Topics
Introduction
This comprehensive examination assesses mastery of foundational and applied cryptography concepts
required for the WGU D830/D334 Introduction to Cryptography Objective Assessment. It evaluates
understanding of symmetric and asymmetric encryption, block and stream ciphers, hashing algorithms,
digital signatures, public key infrastructure, cryptographic protocols, and attack vectors. The multiple-
choice and scenario-based structure requires application of cryptographic principles to real-world
security scenarios. Emphasis is placed on algorithm selection, key management, protocol analysis, and
security best practices. This exam reflects the rigor of the WGU D830/D334 course and prepares
candidates for the Objective Assessment and professional cybersecurity practice.
SECTION ONE: QUESTIONS 1–250
1. A security analyst is explaining the difference between plaintext and ciphertext to a new team
member. The analyst notes that authorized parties reverse the transformation using a secret value.
Which term correctly names that secret value?
A. A nonce used only for integrity
B. A cryptographic key that parametrizes the encryption and decryption algorithms
,C. A hash digest that is publicly posted
D. A salt that is never reused
B. A cryptographic key that parametrizes the encryption and decryption algorithms
RATIONALE: The key is the secret parameter that drives reversible cryptographic transformations
between plaintext and ciphertext. A nonce is a number used once, a hash digest is a fixed-size output,
and a salt is random data added to passwords before hashing.
2. An instructor asks students to identify the primary security goal achieved when data is transformed so
that unauthorized parties cannot read its meaning. Which goal is being described?
A. Availability only
B. Non-repudiation exclusively
C. Physical destruction of media
D. Confidentiality
D. Confidentiality
RATIONALE: Confidentiality is the protection of information from unauthorized disclosure, classically
provided by encryption. Availability ensures data is accessible when needed, non-repudiation prevents
denial of actions, and physical destruction is not a security goal.
3. A historian describes a cipher in which each plaintext letter is shifted a fixed number of positions in
the alphabet. Which classical cipher matches this description?
A. Caesar cipher
B. Vigenère cipher with a long keyword
C. One-time pad
D. RSA public-key encryption
A. Caesar cipher
RATIONALE: The Caesar cipher is a monoalphabetic substitution that shifts every letter by a constant
offset. The Vigenère cipher uses multiple mappings based on a keyword, the one-time pad uses a
random key as long as the message, and RSA is a modern public-key algorithm.
4. A student claims that a monoalphabetic substitution cipher is secure against frequency analysis
because the alphabet is rearranged. Which counter-argument is most accurate?
A. Only polyalphabetic ciphers are vulnerable to frequency analysis
B. Letter and digram frequencies in the ciphertext still reflect language statistics and allow recovery of
the mapping
C. Frequency analysis never works on any substitution cipher
D. Monoalphabetic ciphers are information-theoretically secure
B. Letter and digram frequencies in the ciphertext still reflect language statistics and allow recovery
of the mapping
, RATIONALE: Monoalphabetic substitutions preserve letter frequencies, making them vulnerable to
statistical cryptanalysis. Polyalphabetic ciphers are more resistant, frequency analysis does work on
substitution ciphers, and monoalphabetic ciphers are not information-theoretically secure.
5. A team is comparing a cipher that uses a single fixed mapping for every letter with one that uses
multiple mappings selected by a keyword. Which pair correctly labels these approaches?
A. Stream versus block only
B. Symmetric versus asymmetric only
C. Hashing versus encryption
D. Monoalphabetic versus polyalphabetic substitution
D. Monoalphabetic versus polyalphabetic substitution
RATIONALE: Monoalphabetic uses one mapping; polyalphabetic (e.g., Vigenère) varies the mapping
according to a key. Stream versus block and symmetric versus asymmetric are different classification
schemes. Hashing is not encryption.
6. An analyst states that the one-time pad is theoretically unbreakable under certain conditions. Which
condition is essential for that claim?
A. The key must be truly random, at least as long as the message, and never reused
B. The key may be a short repeated password
C. The key can be derived from the message itself
D. The key may be published after use
A. The key must be truly random, at least as long as the message, and never reused
RATIONALE: Perfect secrecy of the one-time pad requires a random key as long as the plaintext that
is used only once. A short repeated password, deriving the key from the message, or publishing the key
after use would all compromise security.
7. A developer confuses encoding with encryption. Which statement correctly distinguishes the two?
A. Encoding and encryption are identical operations
B. Encoding transforms data for compatibility and is reversible without a key; encryption provides
confidentiality and requires a key
C. Encoding provides confidentiality; encryption provides compatibility
D. Both require a secret key
B. Encoding transforms data for compatibility and is reversible without a key; encryption provides
confidentiality and requires a key
RATIONALE: Encoding (e.g., Base64, ASCII) is reversible without a key and is used for data
representation. Encryption requires a key and provides confidentiality. They are not identical
operations.
8. Which of the following best describes Kerckhoffs's Principle?
, A. A cryptosystem should be secure even if everything about the system, except the key, is public
knowledge
B. The algorithm must be kept secret to maintain security
C. The key must be shorter than the message
D. Encryption should only be used for short messages
A. A cryptosystem should be secure even if everything about the system, except the key, is public
knowledge
RATIONALE: Kerckhoffs's Principle states that a cryptographic system should be secure even if
everything about the system, except the key, is public knowledge. Security should rely on the key, not
the secrecy of the algorithm.
9. A security engineer needs to ensure that a message has not been altered during transmission. Which
security property is being addressed?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
B. Integrity
RATIONALE: Integrity ensures that data has not been modified or tampered with. Confidentiality
protects against unauthorized disclosure, availability ensures accessibility, and non-repudiation prevents
denial of actions.
10. Which of the following is a symmetric encryption algorithm?
A. RSA
B. ECC
C. AES
D. Diffie-Hellman
C. AES
RATIONALE: AES (Advanced Encryption Standard) is a symmetric block cipher. RSA and ECC are
asymmetric algorithms, and Diffie-Hellman is a key exchange protocol.
11. What is the block size and key size of DES?
A. 64-bit block size, 56-bit key size
B. 128-bit block size, 128-bit key size
C. 64-bit block size, 112-bit key size
D. 128-bit block size, 256-bit key size
A. 64-bit block size, 56-bit key size
2026 ACTUAL EXAM TEST BANK | WGU D830/D334 INTRO TO
CRYPTOGRAPHY OA FINAL REVIEW WITH 250 REAL EXAM
QUESTIONS AND CORRECT VERIFIED ANSWERS/ ALREADY
GRADED A+ (MOST RECENT!!)
Core Domains
1. Foundations of Cryptography and Cryptographic Principles
2. Symmetric Encryption and Block/Stream Ciphers
3. Asymmetric Cryptography and Key Exchange
4. Hashing, MACs, and Digital Signatures
5. Protocols, PKI, Attacks, and Applications
6. Classical Cryptography and Historical Ciphers
7. Key Management and Certificate Lifecycle
8. Network Security and Wireless Protocols
9. Cryptographic Attacks and Threat Models
10. Post-Quantum Cryptography and Emerging Topics
Introduction
This comprehensive examination assesses mastery of foundational and applied cryptography concepts
required for the WGU D830/D334 Introduction to Cryptography Objective Assessment. It evaluates
understanding of symmetric and asymmetric encryption, block and stream ciphers, hashing algorithms,
digital signatures, public key infrastructure, cryptographic protocols, and attack vectors. The multiple-
choice and scenario-based structure requires application of cryptographic principles to real-world
security scenarios. Emphasis is placed on algorithm selection, key management, protocol analysis, and
security best practices. This exam reflects the rigor of the WGU D830/D334 course and prepares
candidates for the Objective Assessment and professional cybersecurity practice.
SECTION ONE: QUESTIONS 1–250
1. A security analyst is explaining the difference between plaintext and ciphertext to a new team
member. The analyst notes that authorized parties reverse the transformation using a secret value.
Which term correctly names that secret value?
A. A nonce used only for integrity
B. A cryptographic key that parametrizes the encryption and decryption algorithms
,C. A hash digest that is publicly posted
D. A salt that is never reused
B. A cryptographic key that parametrizes the encryption and decryption algorithms
RATIONALE: The key is the secret parameter that drives reversible cryptographic transformations
between plaintext and ciphertext. A nonce is a number used once, a hash digest is a fixed-size output,
and a salt is random data added to passwords before hashing.
2. An instructor asks students to identify the primary security goal achieved when data is transformed so
that unauthorized parties cannot read its meaning. Which goal is being described?
A. Availability only
B. Non-repudiation exclusively
C. Physical destruction of media
D. Confidentiality
D. Confidentiality
RATIONALE: Confidentiality is the protection of information from unauthorized disclosure, classically
provided by encryption. Availability ensures data is accessible when needed, non-repudiation prevents
denial of actions, and physical destruction is not a security goal.
3. A historian describes a cipher in which each plaintext letter is shifted a fixed number of positions in
the alphabet. Which classical cipher matches this description?
A. Caesar cipher
B. Vigenère cipher with a long keyword
C. One-time pad
D. RSA public-key encryption
A. Caesar cipher
RATIONALE: The Caesar cipher is a monoalphabetic substitution that shifts every letter by a constant
offset. The Vigenère cipher uses multiple mappings based on a keyword, the one-time pad uses a
random key as long as the message, and RSA is a modern public-key algorithm.
4. A student claims that a monoalphabetic substitution cipher is secure against frequency analysis
because the alphabet is rearranged. Which counter-argument is most accurate?
A. Only polyalphabetic ciphers are vulnerable to frequency analysis
B. Letter and digram frequencies in the ciphertext still reflect language statistics and allow recovery of
the mapping
C. Frequency analysis never works on any substitution cipher
D. Monoalphabetic ciphers are information-theoretically secure
B. Letter and digram frequencies in the ciphertext still reflect language statistics and allow recovery
of the mapping
, RATIONALE: Monoalphabetic substitutions preserve letter frequencies, making them vulnerable to
statistical cryptanalysis. Polyalphabetic ciphers are more resistant, frequency analysis does work on
substitution ciphers, and monoalphabetic ciphers are not information-theoretically secure.
5. A team is comparing a cipher that uses a single fixed mapping for every letter with one that uses
multiple mappings selected by a keyword. Which pair correctly labels these approaches?
A. Stream versus block only
B. Symmetric versus asymmetric only
C. Hashing versus encryption
D. Monoalphabetic versus polyalphabetic substitution
D. Monoalphabetic versus polyalphabetic substitution
RATIONALE: Monoalphabetic uses one mapping; polyalphabetic (e.g., Vigenère) varies the mapping
according to a key. Stream versus block and symmetric versus asymmetric are different classification
schemes. Hashing is not encryption.
6. An analyst states that the one-time pad is theoretically unbreakable under certain conditions. Which
condition is essential for that claim?
A. The key must be truly random, at least as long as the message, and never reused
B. The key may be a short repeated password
C. The key can be derived from the message itself
D. The key may be published after use
A. The key must be truly random, at least as long as the message, and never reused
RATIONALE: Perfect secrecy of the one-time pad requires a random key as long as the plaintext that
is used only once. A short repeated password, deriving the key from the message, or publishing the key
after use would all compromise security.
7. A developer confuses encoding with encryption. Which statement correctly distinguishes the two?
A. Encoding and encryption are identical operations
B. Encoding transforms data for compatibility and is reversible without a key; encryption provides
confidentiality and requires a key
C. Encoding provides confidentiality; encryption provides compatibility
D. Both require a secret key
B. Encoding transforms data for compatibility and is reversible without a key; encryption provides
confidentiality and requires a key
RATIONALE: Encoding (e.g., Base64, ASCII) is reversible without a key and is used for data
representation. Encryption requires a key and provides confidentiality. They are not identical
operations.
8. Which of the following best describes Kerckhoffs's Principle?
, A. A cryptosystem should be secure even if everything about the system, except the key, is public
knowledge
B. The algorithm must be kept secret to maintain security
C. The key must be shorter than the message
D. Encryption should only be used for short messages
A. A cryptosystem should be secure even if everything about the system, except the key, is public
knowledge
RATIONALE: Kerckhoffs's Principle states that a cryptographic system should be secure even if
everything about the system, except the key, is public knowledge. Security should rely on the key, not
the secrecy of the algorithm.
9. A security engineer needs to ensure that a message has not been altered during transmission. Which
security property is being addressed?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
B. Integrity
RATIONALE: Integrity ensures that data has not been modified or tampered with. Confidentiality
protects against unauthorized disclosure, availability ensures accessibility, and non-repudiation prevents
denial of actions.
10. Which of the following is a symmetric encryption algorithm?
A. RSA
B. ECC
C. AES
D. Diffie-Hellman
C. AES
RATIONALE: AES (Advanced Encryption Standard) is a symmetric block cipher. RSA and ECC are
asymmetric algorithms, and Diffie-Hellman is a key exchange protocol.
11. What is the block size and key size of DES?
A. 64-bit block size, 56-bit key size
B. 128-bit block size, 128-bit key size
C. 64-bit block size, 112-bit key size
D. 128-bit block size, 256-bit key size
A. 64-bit block size, 56-bit key size
