CREST Cryptography & PKI 2

Question 1

Which key length is currently recommended for RSA keys to provide adequate security according to NIST guidelines?

Accepted Answer

2048 bits or higher

Answer

512 bits

Answer

1024 bits

Answer

768 bits

Question 2

What is the purpose of OCSP (Online Certificate Status Protocol)?

Accepted Answer

To check the real-time revocation status of a certificate

Answer

To generate new SSL certificates

Answer

To negotiate cipher suites

Answer

To distribute root CA certificates

Question 3

Which elliptic curve is widely used in TLS 1.3 for key exchange?

Accepted Answer

X25519

Answer

secp192r1

Answer

Brainpool P-160

Answer

NIST P-521

Question 4

What does a digital signature primarily provide?

Accepted Answer

Non-repudiation and integrity verification

Answer

Confidentiality of data in transit

Answer

Key agreement between two parties

Answer

Password hashing for authentication

Question 5

Which attack involves an adversary obtaining a valid certificate for a domain they do not control by exploiting weaknesses in the CA validation process?

Accepted Answer

Certificate misissuance attack

Answer

Padding oracle attack

Answer

Bleichenbacher attack

Answer

BEAST attack

Question 6

What is the primary difference between symmetric and asymmetric encryption?

Accepted Answer

Symmetric uses one shared key; asymmetric uses a key pair

Answer

Symmetric is always faster and more secure

Answer

Asymmetric uses one shared key; symmetric uses a key pair

Answer

Symmetric encryption cannot be used for bulk data