CSX CSX Cryptography and Data Protection

Question 1

What is the primary difference between symmetric and asymmetric encryption?

Accepted Answer

Symmetric uses one shared key; asymmetric uses a public/private key pair

Answer

Symmetric uses two keys; asymmetric uses one key

Answer

Symmetric is slower than asymmetric encryption

Answer

Asymmetric cannot be used for bulk data encryption

Question 2

Which hashing algorithm is currently recommended by NIST for producing a 256-bit digest?

Accepted Answer

SHA-256

Answer

MD5

Answer

SHA-1

Answer

DES

Question 3

What is the purpose of a digital certificate in public key infrastructure (PKI)?

Accepted Answer

To bind a public key to an identity, verified by a Certificate Authority

Answer

To encrypt hard drives

Answer

To generate symmetric session keys

Answer

To store private keys securely in hardware

Question 4

Which encryption standard is federally approved in the US for protecting classified and sensitive government data?

Accepted Answer

AES

Answer

DES

Answer

3DES

Answer

RC4

Question 5

What is a rainbow table attack and which control best mitigates it?

Accepted Answer

A precomputed hash lookup attack mitigated by password salting

Answer

A brute-force attack mitigated by longer passwords

Answer

A replay attack mitigated by session tokens

Answer

A dictionary attack mitigated by multi-factor authentication

Question 6

In TLS, what is the role of the handshake protocol?

Accepted Answer

To negotiate cipher suites and establish session keys between client and server

Answer

To transfer encrypted application data

Answer

To verify file integrity after download

Answer

To compress data before transmission