Certified Ethical Hacker Cryptography Fundamentals 3

Question 1

Which hashing algorithm is considered broken and should not be used for security purposes?

Accepted Answer

MD5

Answer

MD5 is vulnerable to collision attacks and is no longer considered secure.

Question 2

What technique adds random data to a password before hashing to defend against rainbow tables?

Accepted Answer

Salting

Answer

Salting adds unique random data to each password so identical passwords hash differently.

Question 3

Which cipher mode requires an initialization vector (IV) to randomize the first block?

Accepted Answer

CBC

Answer

CBC mode uses an IV to ensure identical plaintext blocks encrypt differently.

Question 4

Why is ECB mode generally discouraged for encrypting large amounts of data?

Accepted Answer

Identical plaintext blocks produce identical ciphertext

Answer

ECB encrypts each block independently, revealing patterns in the plaintext.

Question 5

What is the primary purpose of a Certificate Authority (CA) in a PKI?

Accepted Answer

Issue and verify digital certificates

Answer

A CA issues digital certificates that bind public keys to verified identities.

Certified Ethical Hacker Practice Test