CCP CCP Cryptography & PKI

Question 1

Which cryptographic property ensures that a sender cannot later deny having sent a message?

Accepted Answer

Non-repudiation

Answer

Confidentiality

Answer

Integrity

Answer

Availability

Question 2

What is the primary difference between symmetric and asymmetric encryption?

Accepted Answer

Symmetric uses one key for encryption and decryption; asymmetric uses a public/private key pair

Answer

Symmetric is slower; asymmetric is faster

Answer

Symmetric uses longer keys; asymmetric uses shorter keys

Answer

Symmetric encrypts data in transit; asymmetric encrypts data at rest

Question 3

Which hashing algorithm is currently recommended by NIST for generating message digests due to its resistance to collision attacks?

Accepted Answer

SHA-256

Answer

MD5

Answer

SHA-1

Answer

CRC32

Question 4

In a Public Key Infrastructure (PKI), what is the role of a Certificate Authority (CA)?

Accepted Answer

To issue, sign, and revoke digital certificates that bind public keys to identities

Answer

To generate private keys on behalf of end users

Answer

To encrypt data exchanged between clients and servers

Answer

To store private keys in a hardware security module

Question 5

What mechanism allows a relying party to check whether a digital certificate has been revoked before it reaches its expiration date?

Accepted Answer

Online Certificate Status Protocol (OCSP)

Answer

Certificate Signing Request (CSR)

Answer

Key encapsulation mechanism

Answer

Certificate Transparency log

Question 6

Which cipher mode of operation provides both confidentiality and data integrity within a single operation, making it suitable for TLS 1.3?

Accepted Answer

Galois/Counter Mode (GCM)

Answer

Electronic Codebook (ECB)

Answer

Cipher Block Chaining (CBC)

Answer

Output Feedback (OFB)