Cryptography: Concepts and Services

Which cryptographic service ensures that data is not accessed by unauthorized parties?

Which of the following is a primary goal of authentication in cryptographic services?

What cryptographic service provides assurance that data has not been altered in transit or storage?

Which of the following best describes the purpose of hashing in cryptographic integrity?

What is the primary advantage of using asymmetric encryption over symmetric encryption for key exchange?

Which of the following algorithms is NOT primarily used for encryption?

In the context of cryptographic services, what does HMAC provide in addition to data integrity?

Which of the following statements is true regarding symmetric encryption?

What is the purpose of a digital certificate?

Which entity typically signs a digital certificate?

What is a key property of digital signatures?

Which of the following describes the role of a Registration Authority (RA) in a PKI?

In asymmetric cryptography, Alice encrypts a message using Bob's public key. Who can decrypt this message?

What is the purpose of the Diffie-Hellman key exchange algorithm?

Which of the following is a characteristic of symmetric encryption algorithms?

Which key is used to decrypt a message when using asymmetric encryption?

What is the main purpose of a Certificate Authority (CA)?

Which of these choices is considered the LEAST secure method for authentication?

Which of the following hash algorithms is considered more secure?

For ensuring Confidentiality with encryption, which combination is considered the MOST secure?

How does asymmetric key cryptography contribute to authentication?

Which of the following best describes the purpose of 'non-repudiation' in the context of cryptographic services?

In a Public Key Infrastructure (PKI), what is the primary responsibility of the Certificate Authority (CA)?

Which of the following algorithms would you most likely use if you wanted to focus primarily on performing a 'Key-Exchange'?

What is the purpose of applying a hash function to data before digitally signing it using asymmetric cryptography?

Which of the following is a key benefit typically associated with implementing VPNs?

In the context of VPN technologies, what is the primary difference between a site-to-site VPN and a remote-access VPN?

Which of the following is a component specifically associated with a remote-access VPN setup?

In an IPsec VPN, which protocol provides authentication and integrity but does not provide confidentiality?

Which of the following statements best describes the function of the ESP protocol in IPsec?

Which of the following algorithms is considered the most secure for encryption?

Which of the following hash algorithms is generally considered more secure?

Which of the following is a method to authenticate peers?

Diffie-Hellman is uses for:

In the context of IPsec, what is the primary function of Internet Key Exchange (IKE)?

During IKE Phase 1, what is the primary goal?

Which task is not performed in IKE Phase 2?

When configuring a site-to-site IPsec VPN with pre-shared key authentication, what must match on both VPN endpoints?

What is the purpose of an extended access list when configuring IPsec?

What is the function of a crypto map?

Which command is used to apply a crypto map to an interface?

After configuring a crypto map, what command is essential to verify the IPsec VPN tunnel is operational?

What command on a Cisco router is used to configure the pre-shared key for IKE?

Which command is used to define the parameters for data encryption and authentication used in IPsec?

When configuring an IPsec VPN, the command set pfs group24 is used within the crypto map configuration. What does pfs stand for?

If a newly configured crypto map remains disabled even after configuring an access list and peer, what key element might be missing?

After applying a crypto map to an interface, what message confirms ISAKMP is active?

What happens if you do not put in the correct access list when attempting to perform the key exchange?

Which of the following correctly identifies how to test and verify that interesting traffic is working?

When verifying that the VPN is working, what does QM_IDLE mean?