Practice Test Geeks(CSX) Cybersecurity Nexus Certification Practice Test
← All CSX Flashcard Decks

CSX Cryptography and Data Protection Flashcards

6 cards from real CSX practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 CSX Cryptography and Data Protection flashcards as text

  1. What is the primary difference between symmetric and asymmetric encryption?

    Answer: Symmetric uses one shared key; asymmetric uses a public/private key pair

    Symmetric encryption uses a single shared key for both encryption and decryption, while asymmetric uses a mathematically linked key pair.

  2. Which hashing algorithm is currently recommended by NIST for producing a 256-bit digest?

    Answer: SHA-256

    SHA-256, part of the SHA-2 family, is NIST-recommended and produces a 256-bit hash, unlike the deprecated MD5 and SHA-1.

  3. What is the purpose of a digital certificate in public key infrastructure (PKI)?

    Answer: To bind a public key to an identity, verified by a Certificate Authority

    A digital certificate issued by a CA associates a public key with an identity, enabling trust in encrypted communications.

  4. Which encryption standard is federally approved in the US for protecting classified and sensitive government data?

    Answer: AES

    AES (Advanced Encryption Standard) is NIST-approved and used by the US government for protecting classified information.

  5. What is a rainbow table attack and which control best mitigates it?

    Answer: A precomputed hash lookup attack mitigated by password salting

    Rainbow tables are precomputed hash databases; adding a unique salt to each password before hashing defeats this attack.

  6. In TLS, what is the role of the handshake protocol?

    Answer: To negotiate cipher suites and establish session keys between client and server

    The TLS handshake negotiates protocol version, cipher suites, authenticates parties, and establishes session encryption keys.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. isaca.org — Test delivery, eligibility, fees, passing score, registration deadline, renewal, retake fee, retake policy, score release, time limit · verified Oct 2026