Notes

q11.
Which encryption method is based on the idea of using the same key for encryption and decryption of data?
Question 11Answer

a.
asymmetric encryption

b.
hashing function

c.
elliptical curve encryption

d.
symmetric encryption

q12.
A public key infrastructure __________.
Question 12Answer

a.
enables secure communications in chat rooms, and when text messaging on smart phones

b.
provides all of the components needed for entities to communicate securely and predictably

c.
enables parties to use communications such as e-mail

d.

provides digital signatures as an application service provider

q13.
What is a certificate repository?
Question 13Answer

a.
a centralized directory containing public keys and their corresponding certificates accessible by a subset of individuals

b.
an entity that generates electronic credentials

c.
a directory that calculates a message digest for the certificate

d.
a directory of root certificates that requires a centralized infrastructure
q14.
What is a digital certificate?
Question 14Answer

a.
a means of establishing an association between the subject's identity and a public key

b.
an entity that generates electronic credentials and distributes them upon proving their identity sufficiently

c.
a means of establishing the validity of an offer from a person, entity, web site, or e-mail

d.
a centralized directory in which registered keys are created and stored
q15.
Which statement best describes a trust domain?
Question 15Answer

a.
a construct that allows one user to validate the other's certificate

b.
a construct of systems, personnel, applications, protocols, technologies, and policies that work together to provide a certain level of protection

c.
the agreed upon, trusted third party for certificate allocation

d.
an entity that allows the certificate's issuer and subject fields hold the same information
q16.
Why should an organization construct and implement a PKI?
Question 16Answer

a.
to enable a centralized directory to store registered certificates and distribute private keys to users

b.
to eliminate certificate authorities

c.
to establish a level of trust between two entities

d.
to provide identification to individuals and ensure availability
q17.
How is integrity provided?
Question 17Answer

a.
using one-way hash functions and digital signatures

b.
by applying a digital certificate

c.
using two-way hash functions and digital signatures

d.
by using asymmetric encryption
q18.
What is the best defense against rainbow table attacks?
Question 18Answer

a.
Lock the account after a few failed login attempts.

b.
Use salted hashes.

c.
Encrypt the password file with asymmetric encryption.

d.
Use a large keyspace.
q19.
What is the best way to thwart a known plaintext/ciphertext attack?
Question 19Answer

a.
Use a large keyspace.

b.
Lock the account after a few failed login attempts.

c.
Encrypt the password file with asymmetric encryption.

d.
Use salted hashes.
q20.
Which type of attack is designed to defeat proper key exchange by intercepting the remote party's key and replacing it with the attacker's key in both directions?
Question 20Answer

a.
man-in-the-middle

b.
rainbow table

c.
collision

d.
replay