Cybersecurity Plus Bootcamp Module 3 Quiz

Which part of a simple cryptographic system must be kept secret for security?

Cipher (algorithm)

Correct Incorrect Correct answer

Ciphertext (encrypted message)

Correct Incorrect Correct answer

Key

Correct Incorrect Correct answer

All of the above

Correct Incorrect Correct answer

Why is hashing a useful security technique, even though it cannot be reversed?

It hides encryption keys.

Correct Incorrect Correct answer

It allows two parties to verify data integrity by comparing digests.

Correct Incorrect Correct answer

It compresses data for faster transmission.

Correct Incorrect Correct answer

It can replace encryption entirely.

Correct Incorrect Correct answer

Which security property is primarily assured by symmetric encryption?

Integrity

Correct Incorrect Correct answer

Confidentiality

Correct Incorrect Correct answer

Non-repudiation

Correct Incorrect Correct answer

Availability

Correct Incorrect Correct answer

Which of the following describes the properties of a public/private key pair?

Both keys can reverse each other’s operations; private key is secret, public key is shared.

Correct Incorrect Correct answer

The private key can be derived from the public key.

Correct Incorrect Correct answer

Both keys are kept secret.

Correct Incorrect Correct answer

Only the public key can encrypt data.

Correct Incorrect Correct answer

What is the correct process for digitally signing a message?

Encrypt the message with the sender’s public key.

Correct Incorrect Correct answer

Hash the message and encrypt the digest with the sender’s private key.

Correct Incorrect Correct answer

Hash the message and encrypt the digest with the recipient’s public key.

Correct Incorrect Correct answer

Encrypt the message with the recipient’s private key.

Correct Incorrect Correct answer

How does a subject obtain a certificate from a Certificate Authority (CA)?

Email the CA directly requesting a certificate.

Correct Incorrect Correct answer

Generate a key pair, submit a CSR with public key and info to the CA.

Correct Incorrect Correct answer

Download the CA’s private key.

Correct Incorrect Correct answer

Ask a third party to vouch for them without verification.

Correct Incorrect Correct answer

What cryptographic information is stored in a digital certificate?

The subject’s private key

Correct Incorrect Correct answer

The subject’s public key and supported algorithms.

Correct Incorrect Correct answer

Only the CA’s signature

Correct Incorrect Correct answer

Encryption keys for all users

Correct Incorrect Correct answer

Which certificate field supports identification of a server by multiple subdomains?

Common Name (CN)

Correct Incorrect Correct answer

Subject Alternative Name (SAN)

Correct Incorrect Correct answer

Issuer

Correct Incorrect Correct answer

Key Usage

Correct Incorrect Correct answer

If a company loses control of its private key, what could be at risk?

Only encrypted data

Correct Incorrect Correct answer

Only authentication systems

Correct Incorrect Correct answer

Both data confidentiality and authentication systems

Correct Incorrect Correct answer

Nothing, if the public key is intact

Correct Incorrect Correct answer

What is the main risk of key escrow, and how can it be mitigated?

Loss of encryption capability; mitigated with backups

Correct Incorrect Correct answer

Rogue insider decryption; mitigated with M-of-N access controls

Correct Incorrect Correct answer

Public key disclosure; mitigated with hashing

Correct Incorrect Correct answer

Brute force attacks; mitigated with longer keys

Correct Incorrect Correct answer

What mechanism informs clients about suspended or revoked certificates?

DNS lookups

Correct Incorrect Correct answer

CRL or OCSP

Correct Incorrect Correct answer

Key escrow service

Correct Incorrect Correct answer

Public key hashing

Correct Incorrect Correct answer

Why is a Hardware Security Module (HSM) often preferred over server-based key management?

It is cheaper and easier to deploy.

Correct Incorrect Correct answer

It reduces attack surface, is tamper-evident, and offers better RNG.

Correct Incorrect Correct answer

It automatically issues certificates without verification.

Correct Incorrect Correct answer

It eliminates the need for public keys.

Correct Incorrect Correct answer

In full-disk encryption, what type of cipher is used for the Key Encryption Key (KEK)?

Symmetric cipher (AES)

Correct Incorrect Correct answer

Asymmetric cipher (RSA or ECC)

Correct Incorrect Correct answer

Hash function (SHA-256)

Correct Incorrect Correct answer

Stream cipher (RC4)

Correct Incorrect Correct answer

True or False: Perfect Forward Secrecy (PFS) ensures that if a server’s private key is compromised, past traffic cannot be decrypted.

TRUE

Correct Incorrect Correct answer

FALSE

Correct Incorrect Correct answer

Why does Diffie-Hellman support Perfect Forward Secrecy (PFS)?

It hides the public key.

Correct Incorrect Correct answer

It allows session keys to be derived without transmitting them directly.

Correct Incorrect Correct answer

It encrypts passwords.

Correct Incorrect Correct answer

It stores keys in a certificate.

Correct Incorrect Correct answer

True or False: A salt value must be kept secret to protect a hashed password.

TRUE

Correct Incorrect Correct answer

FALSE

Correct Incorrect Correct answer

Cybersecurity Plus Bootcamp Module 3 Quiz

Cybersecurity Plus Bootcamp Module 3 Quiz

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question