CSS CSS Cryptography & Data Protection 1

Question 1

Which encryption mode of AES is considered most secure for bulk data encryption due to its use of an initialization vector and chaining?

Accepted Answer

AES-CBC (Cipher Block Chaining)

Answer

AES-CBC uses an initialization vector and chains each block to the previous ciphertext, preventing identical plaintext blocks from producing identical ciphertext.

Question 2

What is the primary advantage of asymmetric encryption over symmetric encryption?

Accepted Answer

It eliminates the need to securely share a secret key between parties

Answer

Asymmetric encryption uses a public/private key pair, so parties can exchange encrypted data without first sharing a secret key.

Question 3

What is a digital signature's primary function in data security?

Accepted Answer

Verifies the authenticity and integrity of a message or document

Answer

A digital signature uses asymmetric cryptography to prove the message originated from a specific sender and was not altered in transit.

Question 4

Which hashing algorithm is currently recommended by NIST for secure cryptographic applications?

Accepted Answer

SHA-256

Answer

SHA-256 (part of the SHA-2 family) is NIST-recommended for cryptographic use, as MD5 and SHA-1 are vulnerable to collision attacks.

Question 5

What is the purpose of a Public Key Infrastructure (PKI) in enterprise environments?

Accepted Answer

Manages the lifecycle of digital certificates to enable trusted encrypted communications

Answer

PKI provides the framework for issuing, managing, distributing, and revoking digital certificates used for authentication and encryption.

(CSS) Certified Security Sentinel Practice Test

(CSS) Certified Security Sentinel Practice Test

CSS CSS Cryptography & Data Protection 1