CyberVista Cryptography and PKI Questions and Answers

Question 1

A security analyst needs to implement an encryption method that is fast, efficient for large amounts of data, and uses a single key for both encryption and decryption. Which type of cryptography best meets these requirements?

Accepted Answer

Symmetric encryption

Answer

Symmetric encryption uses a single shared key to both encrypt and decrypt data. It is known for its speed and efficiency, making it ideal for encrypting large volumes of data, such as in database or file encryption.

Question 2

In a Public Key Infrastructure (PKI), what is the primary role of a Certificate Authority (CA)?

Accepted Answer

To verify the identity of entities and issue digital certificates.

Answer

The fundamental role of a Certificate Authority (CA) is to act as a trusted third party that validates the identity of entities (like websites, organizations, or individuals) and binds that identity to a public key by issuing a signed digital certificate.

Question 3

A software developer wants to ensure that the source code of an application has not been altered since it was created and to provide proof of its origin. Which cryptographic control should be used to achieve both data integrity and non-repudiation?

Accepted Answer

A digital signature

Answer

A digital signature, created by hashing the data and then encrypting the hash with the sender's private key, provides both integrity (ensuring the data hasn't changed) and non-repudiation (proving the sender's identity, as only they could have used the private key).

Question 4

Which of the following hashing algorithms is now considered insecure and vulnerable to collision attacks, making it unsuitable for modern security applications like password storage?

Accepted Answer

MD5

Answer

MD5 is an older hashing algorithm that has been found to have significant vulnerabilities, most notably its susceptibility to collision attacks, where two different inputs can produce the same hash value. Due to this weakness, it is considered insecure for modern cryptographic purposes.

Question 5

A company is setting up an internal network and needs to issue certificates for its internal servers and devices. The company wants full control over the certificate issuance process and does not require public trust. Which PKI component should they implement?

Accepted Answer

A Private Certificate Authority

Answer

A Private Certificate Authority (or internal CA) is set up and managed by an organization for its own internal use. This allows the organization to issue and manage certificates for internal servers, devices, and users without needing validation from a public CA, providing complete control over the trust hierarchy.

CyberVista Test Practice Test

CyberVista Test Practice Test

CyberVista Cryptography and PKI Questions and Answers