Review Questions - SYS701 - 7 - Cryptography and the PKI

Mike is sending David an encrypted message using a symmetric encryption algorithm. What key should he use to encrypt the message?

Shahla recently discovered an attack where the attacker managed to force a network user to use weak encryption and was then able to decrypt that content. What term best describes this attack?

Norm is using full-disk encryption technology to protect the contents of laptops against theft. What goal of cryptography is he attempting to achieve?

Brian discovers that a user suspected of stealing sensitive information is posting many image files to a message board. What technique might the individual be using to hide sensitive information in those images?

Which one of the following statements about cryptographic keys is incorrect?

What type of cipher operates on one character of text at a time?

Vince is choosing a symmetric encryption algorithm for use in his organization. He would like to choose the strongest algorithm from these choices. What algorithm should he choose?

Kevin is configuring a web server to use digital certificates. What technology can he use to allow clients to quickly verify the status of those certificates without contacting a remote server?

Acme Widgets has 10 employees and they all need the ability to communicate with one another using a symmetric encryption system. The system should allow any two employees to securely communicate without other employees eavesdropping. If an 11th employee is added to the organization, how many new keys must be added to the system?

Referring to the scenario in question 9, if Acme Widgets switched to an asymmetric encryption algorithm, how many keys would be required to add the 11th employee?

What type of digital certificate provides the greatest level of assurance that the certificate owner is who they claim to be?

Glenn recently obtained a wildcard certificate for *.mydomain.com. Which one of the following domains would not be covered by this certificate?

Which one of the following servers is almost always an offline CA in a large PKI deployment?

Which one of the following certificate formats is closely associated with Windows binary certificate files?

What type of security solution provides a hardware platform for the storage and management of encryption keys?

What type of cryptographic attack attempts to force a user to reduce the level of encryption that they use to communicate with a remote server?

David would like to send Mike a message using an asymmetric encryption algorithm. What key should he use to encrypt the message?

When Mike receives the message that David encrypted for him, what key should he use to decrypt the message?

If David wishes to digitally sign the message that he is sending Mike, what key would he use to create the digital signature?

When Mike receives the digitally signed message from David, what key should he use to verify the digital signature?

Shared Secret Key

Downgrade Attack

Confidentiality

Steganography

Stream Cipher

AES Encryption

Certificate Stapling

Symmetric Key Addition

Asymmetric Key Addition

EV Certificate

Wildcard Certificate Limitations

Root CA

PFX Certificate

HSM

Downgrade Attack

Encrypt with Public Key

Decrypt with Private Key

Sign with Private Key

Verify with Public Key

Full-Disk Encryption