Practice Test GeeksISA - Information Security Analyst Certification Practice Test
← All ISA Flashcard Decks

Cryptography & Encryption Standards Flashcards

6 cards from real ISA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Cryptography & Encryption Standards flashcards as text

  1. Which encryption algorithm is currently recommended by NIST for protecting sensitive government data?

    Answer: AES-256 (Advanced Encryption Standard)

    AES-256 is the NIST-approved standard for encrypting sensitive and classified data, providing robust protection against brute-force attacks.

  2. What is the primary difference between symmetric and asymmetric encryption?

    Answer: Symmetric uses one shared key while asymmetric uses a public-private key pair

    Symmetric encryption uses a single shared key for both encryption and decryption, while asymmetric encryption uses mathematically related public and private key pairs.

  3. What is the purpose of a digital certificate in ISA practice?

    Answer: To verify the identity of a party and bind their public key to their identity

    Digital certificates, issued by Certificate Authorities, verify the identity of entities and cryptographically bind their public keys to their verified identity.

  4. Which hashing algorithm is considered secure for current ISA implementations?

    Answer: SHA-256 or SHA-3

    SHA-256 and SHA-3 are considered cryptographically secure hashing algorithms, while MD5 and SHA-1 have known vulnerabilities.

  5. What is perfect forward secrecy (PFS) in the context of ISA?

    Answer: A property ensuring that compromise of long-term keys does not compromise past session keys

    Perfect forward secrecy ensures that even if long-term private keys are compromised, previously recorded encrypted sessions cannot be decrypted.

  6. What is the role of a Public Key Infrastructure (PKI) in information security?

    Answer: To manage digital certificates and public-key encryption throughout an organization

    PKI provides the framework for managing digital certificates, public keys, and the trust relationships needed for secure electronic communications.