INTRODUCTION TO CRYPTOGRAPHY - D334 – COMPREHENSIVE QUESTIONS AND ANSWERS
| VERIFIED AND WELLDETAILED ANSWERS | DETAILED EXPLANATIONS AND RATIONALES |
COMPLETE EXAM PREPARATION STUDY GUIDE | PRACTICE QUESTIONS | LATEST EXAM
UPDATE
* CORE DOMAINS *
• Cryptography Fundamentals and Security Objectives
• Symmetric-Key Cryptography and Block Ciphers
• Asymmetric Cryptography and Key Exchange
• Hashing, Message Authentication, and Password Security
• Digital Signatures, Certificates, and Public Key Infrastructure
• Cryptographic Protocols, Modes, and Secure Communications
• Cryptanalysis, Cryptographic Attacks, and Vulnerabilities
• Classical Cryptography and Cryptographic Principles
• Key Management, Randomness, and Cryptographic Governance
* INTRODUCTION *
This comprehensive assessment is designed to develop and evaluate the knowledge and
practical reasoning required for Introduction to Cryptography (D334). The questions examine
foundational cryptographic terminology, security objectives, algorithms, key management,
hashing, digital signatures, public key infrastructure, secure protocols, cryptanalysis, and
common implementation weaknesses. Multiple-choice questions are used to test both direct
knowledge and the ability to distinguish closely related concepts. Several questions require
application of cryptographic principles to realistic security situations, emphasizing sound
decision-making rather than memorization alone. Effective preparation requires
understanding why cryptographic mechanisms work, when particular techniques are
appropriate, and how improper implementation can undermine otherwise strong security
designs.
SECTION ONE: QUESTIONS 1–100
Cryptography Fundamentals
Question 1. What is the primary purpose of cryptography in information security?
A. To increase network bandwidth
B. To protect information through mathematical techniques
C. To eliminate the need for authentication
D. To replace all physical security controls
Correct Answer: B. To protect information through mathematical techniques
,Explanation: Cryptography uses mathematical algorithms and keys to protect information
and communications. Depending on the mechanism, it can provide confidentiality, integrity,
authentication, and non-repudiation.
Question 2. What term describes information in its original, readable form before
encryption?
A. Ciphertext
B. Digest
C. Plaintext
D. Keystream
Correct Answer: C. Plaintext
Explanation: Plaintext is the original message or data before cryptographic transformation.
Encryption converts plaintext into ciphertext.
Question 3. What is ciphertext?
A. The original unencrypted message
B. The encrypted representation of plaintext
C. A cryptographic key
D. A digital certificate
Correct Answer: B. The encrypted representation of plaintext
Explanation: Ciphertext is the transformed output produced when plaintext is processed by
an encryption algorithm and key. Without the appropriate decryption capability, the
ciphertext should not reveal the original information.
Question 4. Which security objective is most directly associated with preventing
unauthorized disclosure of information?
A. Confidentiality
B. Availability
C. Accountability
D. Non-repudiation
Correct Answer: A. Confidentiality
Explanation: Confidentiality ensures that information is accessible only to authorized
individuals, systems, or processes. Encryption is a major technical mechanism used to
provide confidentiality.
,Question 5. Which security objective focuses on ensuring that data has not been altered
without authorization?
A. Availability
B. Integrity
C. Confidentiality
D. Obfuscation
Correct Answer: B. Integrity
Explanation: Integrity protects information from unauthorized modification or destruction.
Hashes, MACs, and digital signatures can be used to detect or prevent unauthorized
changes.
Question 6. Which security property helps establish that a sender cannot credibly deny
having performed a digitally signed transaction?
A. Availability
B. Confidentiality
C. Non-repudiation
D. Compression
Correct Answer: C. Non-repudiation
Explanation: Digital signatures can provide evidence of message origin and integrity,
supporting non-repudiation when implemented within an appropriate trust and legal
framework.
Question 7. What is cryptanalysis?
A. The process of designing network cables
B. The study and practice of analyzing or breaking cryptographic protections
C. The process of compressing encrypted files
D. The process of creating user accounts
Correct Answer: B. The study and practice of analyzing or breaking cryptographic
protections
Explanation: Cryptanalysis examines cryptographic algorithms, implementations, and
ciphertext to discover weaknesses or recover protected information without simply
possessing the intended secret key.
, Question 8. Which term encompasses both cryptography and cryptanalysis?
A. Cryptology
B. Steganography
C. Encoding
D. Tokenization
Correct Answer: A. Cryptology
Explanation: Cryptology is the broader field encompassing cryptography and cryptanalysis.
Cryptography focuses on constructing protective mechanisms, while cryptanalysis focuses on
analyzing or defeating them.
Question 9. Which principle states that the security of a cryptographic system should
depend on the secrecy of the key rather than the secrecy of the algorithm?
A. Least privilege
B. Kerckhoffs's principle
C. Separation of duties
D. Open-design principle
Correct Answer: B. Kerckhoffs's principle
Explanation: Kerckhoffs's principle states that a cryptosystem should remain secure even
when everything about the system except the key is public knowledge. Modern
cryptographic algorithms are therefore generally designed for public scrutiny.
Question 10. Why is relying on a secret cryptographic algorithm generally considered poor
security practice?
A. Secret algorithms always operate slowly
B. Public algorithms cannot use keys
C. Security through obscurity does not provide dependable cryptographic assurance
D. Public algorithms cannot provide confidentiality
Correct Answer: C. Security through obscurity does not provide dependable cryptographic
assurance
Explanation: A sound cryptographic system should withstand public analysis. Keeping an
algorithm secret does not compensate for weaknesses in its mathematical design or
implementation.
| VERIFIED AND WELLDETAILED ANSWERS | DETAILED EXPLANATIONS AND RATIONALES |
COMPLETE EXAM PREPARATION STUDY GUIDE | PRACTICE QUESTIONS | LATEST EXAM
UPDATE
* CORE DOMAINS *
• Cryptography Fundamentals and Security Objectives
• Symmetric-Key Cryptography and Block Ciphers
• Asymmetric Cryptography and Key Exchange
• Hashing, Message Authentication, and Password Security
• Digital Signatures, Certificates, and Public Key Infrastructure
• Cryptographic Protocols, Modes, and Secure Communications
• Cryptanalysis, Cryptographic Attacks, and Vulnerabilities
• Classical Cryptography and Cryptographic Principles
• Key Management, Randomness, and Cryptographic Governance
* INTRODUCTION *
This comprehensive assessment is designed to develop and evaluate the knowledge and
practical reasoning required for Introduction to Cryptography (D334). The questions examine
foundational cryptographic terminology, security objectives, algorithms, key management,
hashing, digital signatures, public key infrastructure, secure protocols, cryptanalysis, and
common implementation weaknesses. Multiple-choice questions are used to test both direct
knowledge and the ability to distinguish closely related concepts. Several questions require
application of cryptographic principles to realistic security situations, emphasizing sound
decision-making rather than memorization alone. Effective preparation requires
understanding why cryptographic mechanisms work, when particular techniques are
appropriate, and how improper implementation can undermine otherwise strong security
designs.
SECTION ONE: QUESTIONS 1–100
Cryptography Fundamentals
Question 1. What is the primary purpose of cryptography in information security?
A. To increase network bandwidth
B. To protect information through mathematical techniques
C. To eliminate the need for authentication
D. To replace all physical security controls
Correct Answer: B. To protect information through mathematical techniques
,Explanation: Cryptography uses mathematical algorithms and keys to protect information
and communications. Depending on the mechanism, it can provide confidentiality, integrity,
authentication, and non-repudiation.
Question 2. What term describes information in its original, readable form before
encryption?
A. Ciphertext
B. Digest
C. Plaintext
D. Keystream
Correct Answer: C. Plaintext
Explanation: Plaintext is the original message or data before cryptographic transformation.
Encryption converts plaintext into ciphertext.
Question 3. What is ciphertext?
A. The original unencrypted message
B. The encrypted representation of plaintext
C. A cryptographic key
D. A digital certificate
Correct Answer: B. The encrypted representation of plaintext
Explanation: Ciphertext is the transformed output produced when plaintext is processed by
an encryption algorithm and key. Without the appropriate decryption capability, the
ciphertext should not reveal the original information.
Question 4. Which security objective is most directly associated with preventing
unauthorized disclosure of information?
A. Confidentiality
B. Availability
C. Accountability
D. Non-repudiation
Correct Answer: A. Confidentiality
Explanation: Confidentiality ensures that information is accessible only to authorized
individuals, systems, or processes. Encryption is a major technical mechanism used to
provide confidentiality.
,Question 5. Which security objective focuses on ensuring that data has not been altered
without authorization?
A. Availability
B. Integrity
C. Confidentiality
D. Obfuscation
Correct Answer: B. Integrity
Explanation: Integrity protects information from unauthorized modification or destruction.
Hashes, MACs, and digital signatures can be used to detect or prevent unauthorized
changes.
Question 6. Which security property helps establish that a sender cannot credibly deny
having performed a digitally signed transaction?
A. Availability
B. Confidentiality
C. Non-repudiation
D. Compression
Correct Answer: C. Non-repudiation
Explanation: Digital signatures can provide evidence of message origin and integrity,
supporting non-repudiation when implemented within an appropriate trust and legal
framework.
Question 7. What is cryptanalysis?
A. The process of designing network cables
B. The study and practice of analyzing or breaking cryptographic protections
C. The process of compressing encrypted files
D. The process of creating user accounts
Correct Answer: B. The study and practice of analyzing or breaking cryptographic
protections
Explanation: Cryptanalysis examines cryptographic algorithms, implementations, and
ciphertext to discover weaknesses or recover protected information without simply
possessing the intended secret key.
, Question 8. Which term encompasses both cryptography and cryptanalysis?
A. Cryptology
B. Steganography
C. Encoding
D. Tokenization
Correct Answer: A. Cryptology
Explanation: Cryptology is the broader field encompassing cryptography and cryptanalysis.
Cryptography focuses on constructing protective mechanisms, while cryptanalysis focuses on
analyzing or defeating them.
Question 9. Which principle states that the security of a cryptographic system should
depend on the secrecy of the key rather than the secrecy of the algorithm?
A. Least privilege
B. Kerckhoffs's principle
C. Separation of duties
D. Open-design principle
Correct Answer: B. Kerckhoffs's principle
Explanation: Kerckhoffs's principle states that a cryptosystem should remain secure even
when everything about the system except the key is public knowledge. Modern
cryptographic algorithms are therefore generally designed for public scrutiny.
Question 10. Why is relying on a secret cryptographic algorithm generally considered poor
security practice?
A. Secret algorithms always operate slowly
B. Public algorithms cannot use keys
C. Security through obscurity does not provide dependable cryptographic assurance
D. Public algorithms cannot provide confidentiality
Correct Answer: C. Security through obscurity does not provide dependable cryptographic
assurance
Explanation: A sound cryptographic system should withstand public analysis. Keeping an
algorithm secret does not compensate for weaknesses in its mathematical design or
implementation.
