B.3.2 Security+ SY0-601 Domain 2: Architecture and Design Flashcards
189 questions (plus some of my own)
Which Microsoft tool can be used to review a system’s security configuration against recommended settings?
Microsoft Security Compliance Toolkit
Which of the following describes a configuration baseline?
A list of common security settings that a group or all devices share
What should you consider security baselines?
Dynamic
You would like to get a feel for the amount of bandwidth you are using in your network. What is the first thing you should do?
Establish a baseline
Which of the following is a technology that tries to detect and stop sensitive data breaches, or data leakage incidents, in an organization?
Data loss prevention
DLP can be implemented as a software or hardware solution that analyzes traffic in an attempt to detect sensitive data that is being transmitted in violation of an organization’s security policies.
Which of the following DLP implementations analyzes traffic for data containing such things as financial documents, social security numbers, or key words used in proprietary intellectual property?
Network DLP
What does DLP mean?
Data Loss Prevention
Travis is sending a highly confidential email to Craig that contains sensitive data. Which of the following should Travis implement to ensure that only Craig is able to read the email?
Encryption
Which form of cryptography is best suited for bulk encryption because it is so fast?
Symmetric key cryptography
Which of the following security solutions would prevent a user from reading a file that she did not create?
Encrypted File System (EFS)
What is an EFS?
A Windows file encryption option that encrypts individual files so that only the user who created the file can open it
You’ve used BitLocker to implement full volume encryption on a notebook system. The notebook motherboard does not have a TPM chip, so you’ve used an external USB flash drive to store the BitLocker startup key.
You use EFS to encrypt the C:\Secrets folder and its contents.
Which of the following is true in this scenario? (Select two.)
If the C:\Secrets\confidential.docx file is copied to an external USB flash drive, the file will be saved in an unencrypted state.
By default, only the user who encrypted the C:\Secrets\confidential.docx file will be able to open it.
Which of the following database encryption methods encrypts the entire database and all backups?
Transparent Data Encryption (TDE)
Which of the following cloud storage access services acts as a gatekeeper, extending an organization’s security policies into the cloud storage infrastructure?
A cloud-access security broker
What is the on-premises, cloud-based software tool that sits between an organization and a cloud service provider called?
Cloud-access security broker
Which of the following can provide the most specific protection and monitoring capabilities?
Cloud-access security broker
You are purchasing a hard disk from an online retailer over the internet. What does your browser use to ensure that others cannot see your credit card number on the internet?
Secure Sockets Layer (SSL)
Which of the following protocols are often added to other protocols to provide secure transmission of data? (Select two.)
Transport Layer Security (TLS)
SSL
Which of the following protocols can TLS use for key exchange? (Select two.)
Diffie-Hellman
Rivest-Shamir-Adleman (RSA)
Which protocol does HTTPS use to offer greater security in web transactions?
SSL
SSL (Secure Sockets Layer) operates at which layer of the OSI model?
Session
When using SSL authentication, what does the client verify first when checking a server’s identity?
The current date and time must fall within the server’s certificate-validity period
You want to allow traveling users to connect to your private network through the internet. Users connect from various locations, including airports, hotels, and public access points like coffee shops and libraries. As such, you won’t be able to configure the firewalls that might be controlling access to the internet in these locations.
Which of the following protocols would MOST likely be allowed through the widest number of firewalls?
SSL
Which method can you use to verify that a bit-level image copy of a hard drive is an exact clone of the original hard drive collected as evidence?
Hashing
You have been asked to deploy a network solution that includes an alternate location where operational recovery is provided within minutes of a disaster. Which of the following strategies would you choose?
Hot site
Which of the following is a recovery site that may have electricity connected, but there are no servers installed and no high-speed data lines present?
Cold site
Daily backups are completed at the ABD company location, and only a weekly backup is maintained at another network location. Which of the following disaster recovery strategies is ABD using?
Warm site
If your mission-critical services have a maximum tolerable downtime (MTD) or a recovery-time objective (RTO) of 36 hours, what is the optimum form of recovery site?
Warm site
A honeypot is used for which purpose?
To delay intruders in order to gather auditing data
Which of the following BEST describes a honeyfile?
A single file setup to entice and trap attackers
You want to create a collection of computers on your network that appear to have valuable data but actually store fake data that could entice a potential intruder. Once the intruder connects, you want to be able to observe and gather information about the attacker’s methods.
Which feature should you implement?
Honeynet
Which of the following BEST describes the Platform as a Service (PaaS) cloud computing service model?
PaaS delivers everything a developer needs to build an application on the cloud infrastructure
Which of the following cloud computing solutions delivers software applications to a client either over the internet or on a local area network?
SaaS
You are the security administrator for your organization. You have implemented a cloud service to provide features such as authentication, anti-malware, intrusion detection, and penetration testing.
Which cloud service have you most likely implemented?
SECaaS
A group of small local businesses have joined together to share access to a cloud-based payment system.
Which type of cloud is MOST likely being implemented?
Community
What does Public Cloud do?
Provides cloud services to just about anyone
What does the Private Cloud do?
Provides cloud services to a single organization
What does the Community Cloud do?
Allows cloud services to be shared by several organizations
What does the Hybrid Cloud do?
Integrates one cloud service with other cloud services
The IT manager has tasked you with installing new physical machines. These computer systems are barebone systems that simply establish a remote connection to the data center to run the user’s virtualized desktop.
Which type of deployment model is being used?
Thin client
Which of the following is an advantage of software-defined networking (SDN)?
More granular control
Which of the following BEST describes the Application SDN layer?
Communicates with the Control layer through the northbound interface
Which SDN layer would a load balancer that stops and starts VMs as resource use increases reside on?
Application
Software defined networking (SDN) uses a controller to manage devices. The controller is able to inventory hardware components on the network, gather network statistics, make routing decisions based on gathered data, and facilitate communication between devices from different vendors. It can also be used to make widespread configuration changes on just one device.
Which of the following best describes an SDN controller?
The SDN controller is software
From which layer does the Application layer receive its requests?
Control Layer
Which layer is also known as the Infrastructure layer?
Physical Layer
What layer communicated with the Control layer through the northbound interface?
Application Layer
What layer provides the Physical layer with configuration and instructions?
Control Layer
What type of southbound APIs do individual networking devices use on this layer to communicate with the control plane?
Physical Layer
Which of the following does the Application layer use to communicate with the Control layer?
Northbound APIs
Which of the following BEST describes the Physical SDN layer?
Also known as the Infrastructure layer
Network engineers have the option of using software to configure and control the network rather than relying on individual static configuration files that are located on each network device.
Which of the following is a relatively new technology that allows network and security professionals to use software to manage, control, and make changes to a network?
Software-defined networking (SDN)
Which APIs do individual networking devices use to communicate with the control plane from the Physical layer?
Southbound
Which of the following is a disadvantage of software defined networking (SDN)?
SDN standards are still being developed
What is the system that connects application repositories, systems, and IT environments in a way that allows access and exchange of data over a network by multiple devices and locations called?
Integration
Which of the following are disadvantages of server virtualization?
A compromised host system might affect multiple servers
Which of the following are advantages of virtualization? (Select two.)
Centralized administration
Easy migration of systems to different hardware
Which of the following devices is computer software, firmware, or hardware that creates and runs virtual machines?
Hypervisor
What is the limit of virtual machines that can be connected to a virtual network?
Unlimited
Which of the following is an exploit in which malware allows the virtual OS to interact directly with the hypervisor?
Escape
What is an Escape?
It is an exploit in which malware allows the operating system within a virtual machine to break out and interact directly with the hypervisor.
You have a development machine that contains sensitive information relative to your business. You are concerned that spyware and malware might be installed while users browse websites, which could compromise your system or pose a confidentiality risk.
Which of the following actions would BEST protect your system?
Run the browser within a virtual environment
Which of the following is an advantage of a virtual browser?
Protects the host operating system from malicious downloads
Which of the following devices facilitates communication between different virtual machines by checking data packets before moving them to a destination?
Virtual switch
Which type of hypervisor runs as an application on the host machine?
Type 2
You are an application developer. You use a hypervisor with multiple virtual machines installed to test your applications on various operating systems’ versions and editions.
Currently, all of your virtual machines used for testing are connected to the production network through the hypervisor’s network interface. However, you are concerned that the latest application you are working on could adversely impact other network hosts if errors exist in the code.
To prevent issues, you decide to isolate the virtual machines from the production network. However, they still need to be able to communicate directly with each other.
What should you do? (Select two. Both responses are part of the complete solution.)
Create a new virtual switch configured for host-only (internal) networking
Connect the virtual network interfaces in the virtual machines to the virtual switch
Which of the following is a network virtualization solution provided by Microsoft?
Hyper-V
Which of the following virtual devices provides packet filtering and monitoring?
VFA
Which of the following statements about virtual networks is true? (Select two.)
Multiple virtual networks can be associated with a single physical network adapter
A virtual network is dependent on the configuration and physical hardware of the host operating system
Which application development model approaches software development as a continuous, changing process with never-ending versions, bug fixes, and enhancements?
Agile
Which of the following is the first step in the Waterfall application development model?
Requirements
Which of the following is considered a drawback of the Waterfall application development life cycle?
Requirements are determined at the beginning and are carried through to the end product
Which of the following are the two main causes of software vulnerabilities? (Select two.)
Design flaws
Coding errors
You are performing a security test from the outside on a new application that has been deployed.
Which secure testing method are you MOST likely using?
Dynamic
What is a set of software development tools called that can be installed as one unit and provides code frameworks or code snippets to help development go faster?
Software Development Kit (SDK)
You manage a group of 20 Windows workstations that are currently configured as a workgroup. You have been thinking about switching to an Active Directory configuration.
Which advantages would there be to switching to Active Directory? (Select two.)
Centralized configuration control
Centralized authentication
What is the name of the service included with the Windows Server operating system that manages a centralized database containing user account and security information?
Active Directory
What is a “Logical organization of resources”?
Organizational unit (OU)
What is a “Collection of network resources”?
Domain
What is a “Collection of related domain trees”?
Forest
What is a “Network resource in the directory”?
Object
What is a “Group of related domains”?
Tree
What AD Domain is used to manage individual desktop workstation access?
CORPWS7
Which of the following is a message authentication code that allows a user to verify that a file or message is legitimate?
HMAC
Marcus White has just been promoted to a manager. To give him access to the files that he needs, you make his user account a member of the Managers group, which has access to a special shared folder.
Later that afternoon, Marcus tells you that he is still unable to access the files reserved for the Managers group. What should you do?
Have Marcus log off and log back in
Which of the following terms describes the component that is generated following authentication and is used to gain access to resources following login?
Access token
Which kind of access control technology allows more than just the identity of an individual to be transmitted wirelessly to either allow or deny access?
Smart card
A smart card can be used to store all but which of the following items?
Biometric template original
What is the smart card attack description for Software Attacks?
Exploits vulnerabilities in a card’s protocols or encryption methods
What is the smart card attack description for Eavesdropping?
Captures transmission data produced by a card as it is used
What is the smart card attack description for Fault generation?
Deliberately induces malfunctions in a card
What is the smart card attack description for Microprobing?
Accesses the chip’s surface directly to observe, manipulate, and interfere with a circuit
Lori Redford, who has been a member of the Project Management group, was recently promoted to manager of the team. She has been added as a member of the Managers group.
Several days after being promoted, Lori needs to have performance reviews with the team she manages. However, she cannot access the performance management system. As a member of the Managers group, she should have the Allow permission to access this system.
What is MOST likely preventing her from accessing this system?
She is still a member of the Project Management group, which has been denied permission to this system. Deny permissions always override Allow permissions
Which of the following terms is used to describe an event in which a person who should be allowed access is denied access to a system?
False negative
Which of the following defines the crossover error rate for evaluating biometric systems?
The point where the number of false positives matches the number of false negatives in a biometric system
Which of the following are disadvantages of biometrics? (Select two.)
They have the potential to produce numerous false negatives
When used alone, they are no more secure than a strong password
What is the MOST important aspect of a biometric device?
Accuracy
Which of the following is a password that relates to things that people know, such as a mother’s maiden name or a pet’s name?
Cognitive
What is a cognitive password?
They relate to things that people know, such as a mother’s maiden name or a pet’s name
What type of password is maryhadalittlelamb?
Passphrase
Which of the following is the most common form of authentication?
Password
Which of the following are examples of Something You Have authentication controls? (Select two.)
Photo ID
Smart card
Which of the following is the strongest form of multi-factor authentication?
A password, a biometric scan, and a token device
What is a PIN?
Something You Know
What is a Smart card?
Something You Have
What is a Password?
Something You Know
What is a Retina Scan?
Something You Are
What is a Fingerprint scan?
Something You Are
What is a Hardware token?
Something You Have
What is a Passphrase?
Something You Know
What is Voice recognition?
Something You Are
What is Wi-Fi triangulation?
Somewhere You Are
What is Typing behaviors?
Something You Do
Which of the following is the term for the process of validating a subject’s identity?
Authentication
A remote access user needs to gain access to resources on the server. Which of the following processes are performed by the remote access server to control access to resources?
Authentication and authorization
Which of the following are methods for providing centralized authentication, authorization, and accounting for remote access? (Select two.)
TACACS+
RADIUS
Which of the following defines all the prerequisites a device must meet in order to access a network?
Authentication
Which of the following applies the appropriate policies in order to provide a device with the access it’s defined to receive?
Authorization
What is the process of controlling access to resources such as computers, files, or printers called?
Authorization
What is mutual authentication?
A process by which each party in an online communication verifies the identity of the other party
Which of the following drive configurations is fault tolerant?
RAID 5
Which of the following disk configurations might sustain losing two disks? (Select two.)
RAID 1+0
RAID 0+1
You have a computer with three hard disks. A RAID 0 volume uses space on Disk 1 and Disk 2. A RAID 1 volume uses space on Disk 2 and Disk 3.
Disk 2 fails. Which of the following is true?
Data on the RAID 1 volume is accessible; data on the RAID 0 volume is not
You have been asked to implement a RAID 5 solution for your network. What is the minimum number of hard disks that can be used to configure RAID 5?
3
What option is an advantage RAID 5 has over RAID 1?
RAID 5 improves performance over RAID 1
Which device is used to ensure power to a server or network device during short power outages?
Uninterruptible power supply
To prevent server downtime, which of the following components should be installed redundantly in a server system?
Power supply
What is the primary security feature that can be designed into a network’s infrastructure to protect and support availability?
Redundancy
Which of the following network strategies connects multiple servers together so that if one server fails, the others immediately take over its tasks, preventing a disruption in service?
Clustering
Which backup strategy backs up all files from a computer’s file system, regardless of whether the file’s archive bit is set or not, and then marks them as backed up?
Full
Your network performs a full backup every night. Each Sunday, the previous night’s backup tape is archived.
On a Wednesday morning, the storage system fails. How many restore operations would you need to perform to recover all of the data?
1
Which of the following are backed up during an incremental backup?
Only files that have changed since the last full backup
Which of the following is true of an incremental backup’s process?
Backs up all files with the archive bit set and resets the archive bit
Your network uses the following backup strategy:
- Full backups every Sunday night
- Incremental backups Monday night through Saturday night
On a Thursday morning, the storage system fails. How many restore operations would you need to perform to recover all of the data?
4
A system failure has occurred. Which of the following restoration processes would result in the fastest restoration of all data to its most current state?
Restore the full backup and the last differential backup
Which of the following are backed up during a differential backup?
Only files that have changed since the last full backup
Which backup strategy backs up only files that have the archive bit set, but does not mark them as having been backed up?
Differential
Your disaster recovery plan calls for backup media to be stored at a different location. The location is a safe deposit box at the local bank. Because of this, the disaster recovery plan specifies that you choose a method that uses the least amount of backup media, but also allows you to quickly back up and restore files.
Which backup strategy would BEST meet the disaster recovery plan?
Perform a full backup once per week and a differential backup the other days of the week
What does a differential backup do during the backup?
Backs up all files with the archive bit set and does not reset the archive bit
Your network uses the following backup strategy:
- Full backups every Sunday night
- Differential backups Monday night through Saturday night
On Thursday morning, the storage system fails. How many restore operations would you need to perform to recover all of the data?
2
Which of the following describes a system image backup? (Select two.)
A system image contains everything on the system volume, including the operating system, installed programs, drivers, and user data files
A system image backup consists of an entire volume backed up to .vhd files
Why should backup media be stored offsite?
To prevent the same disaster from affecting both the network and the backup media
Which of the following is an open-source hardware and software company that designs and manufactures single-board microcontrollers as well as kits to build digital devices?
Arduino
You manage information systems for a large co-location data center.
Networked environmental controls are used to manage the temperature within the data center. These controls use embedded smart technology that allows them to be managed over an internet connection using a mobile device app.
You are concerned about the security of these devices. What can you do to increase their security posture? (Select two.)
Install the latest firmware updates from the device manufacturer
Verify that your network’s existing security infrastructure is working properly
You manage the information systems for a large manufacturing firm.
Supervisory control and data acquisition (SCADA) devices are used on the manufacturing floor to manage your organization’s automated factory equipment. The SCADA devices use embedded smart technology, allowing them to be managed using a mobile device app over an internet connection.
You are concerned about the security of these devices. What can you do to increase their security posture? (Select two.)
Install the latest firmware updates from the device manufacturer
Verify that your network’s existing security infrastructure is working properly
Which of the following devices are special computer systems that gather, analyze, and manage automated factory equipment?
SCADA
You notice that a growing number of devices, such as environmental control systems and wearable devices, are connecting to your network. These devices, known as smart devices, are sending and receiving data via wireless network connections.
Which of the following labels applies to this growing ecosystem of smart devices?
Internet of Things (IoT)
Which Amazon device can be used to control smart devices (such as lights) throughout a home using voice commands?
Echo
Why do attackers prefer to conduct distributed network attacks in static environments? (Select two.)
Devices are typically more difficult to monitor than traditional network devices
Devices tend to employ much weaker security than traditional network devices
You are creating a VLAN for voice over IP (VoIP). Which command should you use?
switchport voice vlan [number]
Which of the following lets you make phone calls over a packet-switched network?
VoIP
Which of the following serves real-time applications without buffer delays?
RTOS
Which of the following do Raspberry Pi systems make use of?
SoC
Which of the following can be used to stop piggybacking at a front entrance where employees should swipe smart cards to gain entry?
Deploy a mantrap
What is Piggybanking?
It is when an authorized or unauthorized individual gains entry into a secured area by exploiting the credentials of a prior person
Which of the following are solutions that address physical security? (Select two.)
Escort visitors at all times
Require identification and name badges for all employees
Where would badge readers be most appropriate in a small business?
Building entrances and the server room
Which option is a benefit of CCTV?
Expand the area visible by security guards
You want to use CCTV to increase your physical security, and you want the ability to remotely control the camera position. Which camera type should you choose?
Pan Tilt Zoom (PTZ)
If a fingerprint or retina scan is required to open a secured door, which kind of physical security has been implemented?
Biometric locks
Which of the following is the most important thing to do to prevent console access to the router?
Keep the router in a locked room
Your company has five salesmen who work out of the office and frequently leave their laptops laying on their desks in their cubicles. You are concerned that someone might walk by and take one of these laptops.
Which of the following is the BEST protection implementation to address your concerns?
Use cable locks to chain the laptops to the desks
Which of the following can make passwords useless on a router?
Not controlling physical access to the router
Which device is used to allow a USB device to charge but blocks the data transfer capabilities of the device?
USB data blocker
Which of the following fire extinguisher types is best used for the electrical fires that might result when working with computer components?
Class C
What does a Class A fire extinguisher do?
It uses water or soda acid and is best for fires using typical combustible materials (wood, paper, cloth, plastics)
What does a Class B fire extinguisher do?
It uses either CO2 or FM200, but it is best suited for petroleum, oil, solvent, or alcohol fires
What does a Class D fire extinguisher do?
It uses a dry powder and is best for sodium and potassium fires
You walk by the server room and notice that a fire has started. What should you do first?
Make sure everyone has cleared the area
What is the recommended humidity level for server rooms?
50%
Your networking closet contains your network routers, switches, bridges, and some servers. You want to make sure an attacker is not able to gain physical access to the equipment in the networking closet. You also want to prevent anyone from reconfiguring the network to set up remote access or backdoor access.
Which of the following measures are the best ways to secure your networking equipment from unauthorized physical access? (Select two. Each measure is part of a complete solution.)
Place your networking equipment in a room that requires key card entry
Place your networking equipment in a locked cage
Components within your server room are failing at a rapid pace. You discover that the humidity in the server room is at 60% and the temperature is at 80 degrees.
What should you do to help reduce problems?
Add a separate A/C unit in the server room
You maintain a network for an industrial manufacturing company. You are concerned about the dust in the area getting into server components and affecting network availability.
Which of the following should you implement?
Positive pressure system
A Faraday cage is used to prevent what from leaving an area?
Electromagnetic emissions
A computer or small network that is not connected to the rest of the network or the internet is known as?
Air gap
Where should an organization’s web server be placed?
DMZ
Which of the following is the MOST likely to happen if the firewall managing traffic into the DMZ fails?
Only the servers in the DMZ are compromised, but the LAN will stay protected
What needs to be configured on a firewall to allow traffic directed to the public resource in the DMZ?
Packet filters
Which special network area is used to provide added protection by isolating publicly accessible servers?
DMZ
Which device is often employed by power companies to protect cabling infrastructure from having cables added or removed and to prevent emissions from being retrieved from the air?
Protective Distribution System (PDS)
Most equipment is cooled by bringing cold air in the front and ducting the heat out of the back. What is the term for where the heat is sent in this type of scenario?
Hot aisle
You’ve just deployed a new Cisco router that connects several network segments in your organization.
The router is physically located in a cubicle near your office. You’ve backed up the router configuration to a remote location in an encrypted file. You access the router configuration interface from your notebook computer using an SSH client with the username admin01 and the password P@ssW0rd. You have used the MD5 hashing algorithm to protect the password.
What should you do to increase the security of this device?
Move the router to a secure server room
Power, heating, ventilation, air conditioning systems (HVAC), and utilities are all components of which term?
Infrastructure
When you dispose of a computer or sell used hardware, it is crucial that none of the data on the hard disks can be recovered.
Which of the following actions can you take to ensure that no data is recoverable?
Damage the hard disks so badly that all data remanence is gone
Which of the following data destruction techniques uses a punch press or hammer system to crush a hard disk?
Pulverizing
A company is preparing to discard a batch of old hard drives that contain sensitive data. They want to ensure the data is completely destroyed and the drives are rendered unusable.
Which of the following methods should they use?
Pulping
Burning, pulping, and shredding are three ways to securely dispose of data in which form?
Paper
Which of the following is a direct integrity protection?
Digital Signature
What is the most obvious means of providing non-repudiation in a cryptography system?
Digital signatures
What do application control solutions use to identify specific applications?
Application signatures
Which of the following are true of Triple DES (3DES)?
Key length is 168 bits
Which of the following techniques involves adding random bits of data to a password before it is stored as a hash?
Password salting
What is the process of adding random characters at the beginning or end of a password to generate a completely different hash called?
Salting
A receiver wants to verify the integrity of a message received from a sender. A hashing value is contained within the digital signature of the sender.
Which of the following must the receiver use to access the hashing value and verify the integrity of the transmission?
Sender’s public key
Hashing algorithms are used to perform which of the following activities?
Create a message digest
Which of the following is used to verify that a downloaded file has not been altered?
Hash
You have just downloaded a file. You create a hash of the file and compare it to the hash posted on the website. The two hashes match.
What do you know about the file?
Your copy is the same as the copy posted on the website
Which of the following does not or cannot produce a hash value of 128 bits?
SHA-1
Mary wants to send a message to Sam in such a way that only Sam can read it. Which key should be used to encrypt the message?
Sam’s public key
Mary wants to send a message to Sam. She wants to digitally sign the message to prove that she sent it. Which key would Mary use to create the digital signature?
Her private key
Which type(s) of key(s) are used in symmetric cryptography?
A shared key
How many keys are used with symmetric key cryptography?
One
When a cryptographic system is used to protect data confidentiality, what actually takes place?
Unauthorized users are prevented from viewing or accessing the resource
Above all else, what must be protected to maintain the security and benefit of an asymmetric cryptographic solution, especially if it is widely used for digital certificates?
Private keys
The success of asymmetric encryption is dependent upon which of the following?
The secrecy of the key
Which of the following can be classified as a stream cipher?
RC4
Which of the following are true concerning the Advanced Encryption Standard (AES) symmetric block cipher? (Select two.)
It uses a variable-length block and key length (128-, 192-, or 256-bit keys)
It is also known as the Rijndael cipher
How many keys are used with asymmetric (public key) cryptography?
Two
Which of the following algorithms are used in asymmetric encryption? (Select two.)
RSA
Diffie-Hellman
Which of the following algorithms are used in symmetric encryption? (Select two.)
Blowfish
3DES
If a message sender encrypts a message with a key and a message receiver decrypts it using the same key, which type of key exchange is taking place?
Symmetric
Which term means a cryptography mechanism that hides secret communications within various forms of data?
Steganography
You create a new document and save it to a hard drive on a file server on your company’s network. Then you employ an encryption tool to encrypt the file using AES. This activity is an example of accomplishing which security goal?
Confidentiality
By definition, which security concept uses the ability to prove that a sender undeniably sent an encrypted message?
Non-repudiation
When a sender encrypts a message using their own private key, which security service is being provided to the recipient?
Non-repudiation
Your computer system is a participant in an asymmetric cryptography system. You’ve crafted a message to be sent to another user. Before transmission, you hash the message and then encrypt the hash using your private key. You then attach this encrypted hash to your message as a digital signature before sending it to the other user.
Which protection does the private key-signing activity of this process provide?
Non-repudiation
Cryptographic systems provide which of the following security services? (Select two.)
Confidentiality
Non-repudiation
Which of the following are often identified as the three main goals of security? (Select three.)
Integrity
Availability
Confidentiality
Which of the following encryption mechanisms offers the least security because of weak keys?
DES
Which of the following is the weakest symmetric encryption method?
DES
