chapter 10

Question 1

Since \_\_\_\_, the Federal Rules of Civil Procedure require the inclusion of electronically-stored information when responding to discovery requests.
A. 2000
B. 2002
C. 2004
D. 2006
E. 2008

Answer 1

D. 2006

Question 2

Data-at-rest used by a cloud-based appliaction is:
A. always encrypted
B. generally encrypted
C. generally not encrypted
D. never encrypted
E. it is impossible to say

Answer 2

C. generally not encrypted

Question 3

\_\_\_\_ is the "residual representation of data that has been in some way nominally
erased or removed."
A. Exchanged data
B. Data remanenece
C. Cleared data
D. Released data
E. Sanitized data

Answer 3

B. Data remanenece

Question 4

. \_\_\_\_ refers to the process of eradicating data on media before reusing the media in an environment that provides an acceptable level of protection for the data that was on the media before clearing.
A. Erasing
B. Recycling
C. Sanitization
D. Clearing
E. Cleaning

Answer 4

D. Clearing

Question 5

____ refers to the process of removing the data from the media before reusing the media in an environment that does not provide an acceptable level of protection
for the data that was on the media before sanitizing.
A. Erasing
B. Recycling
C. Sanitization
D. Clearing
E. Cleaning

Answer 5

C. Sanitization

Question 6

In \_\_\_\_\_\_ encryption, the same key is used to encrypt and decrypt the message.
A. equivalent
B. symmetric
C. private
D. public
E. asymmetric

Answer 6

B. symmetric

Question 7

In ______ encryption, different keys are used to encrypt and decrypt the message.

A. unequal
B. symmetric
C. asymmetric
D. enhanced
E. private

Answer 7

C. asymmetric

Question 8

Key lengths should be a minimum of \_\_\_\_ for Triple DES (Data Encryption Standard).
A. 56 bits
B. 100 bits
C. 112 bits
D. 128 bits
E. 256 bits

Answer 8

C. 112 bits

Question 9

Key lengths should be a minimum of \_\_\_\_ for AES (Advanced Encryption Standard).
A. 56 bits
B. 100 bits
C. 112 bits
D. 128 bits
E. 256 bits

Answer 9

D. 128 bits

Question 10

The acronym OASIS stands for:
A. Open Access to Similar Information Standards
B. Organization for the Advancement of Structured Information Standards.
C. Organizational Area of Searching Industrial Standards
D. Office for the Administration of Supported Information Structures
E. none of the above

Answer 10

B. Organization for the Advancement of Structured Information Standards.

Question 11

Which of the following are both generated and verified using the same secret key?

A. hash functions and tags
B. private keys and public keys
C. MAC values and digital signatures
D. symmetric algorithms and asymmetric algorithms
E. none of the above

Answer 11

C. MAC values and digital signatures

Question 12

MAC algorithms can be constructed from which of the following?
A. universal hashing
B. cryptographic has functions
C. block cipher algorithms
D. all of the above
E. none of the above

Answer 12

D. all of the above

Question 13

In an encryption context, the acronym MAC stands for:
A. message authentication code
B. maximum access code
C. medium access control
D. mid-range access code
E. macro authentication controller

Answer 13

A. message authentication code

Question 14

The simplest way to use MACs on encrypted data is to use:
A. a streaming symmetric algorithm
B. a block symmetric algorithm
C. an asymmetric algorithm
D. all of the above
E. none of the above

Answer 14

B. a block symmetric algorithm

Question 15

Use of MACs (message authentication codes) ensure:
A. confidentiality
B. integrity
C. availability
D. authentication
E. access control

Answer 15

B. integrity

Question 16

The two basic components required for the encryption of data include:
A. an algorithm and a key
B. a private key and a public key
C. cipher text and an algorithm
D. a sender and a recipient
E. a key generator and a management mechanism

Answer 16

A. an algorithm and a key

Question 17

Whenever possible, keys should be distributed by:
A. personal means
B. private means
C. electronic means
D. physical means
E. manual means

Answer 17

C. electronic means

Question 18

In asymmetric encryption, the encryption key is known as the:
A. public key
B. personal key
C. private key
D. paired key
E. certified key

Answer 18

A. public key

Question 19

In asymmetric encryption, the decryption key is known as the:
A. public key
B. personal key
C. private key
D. paired key
E. certified key

Answer 19

C. private key

Question 20

The public and private keys are known as a(n):
A. key combination
B. asymmetric pair
C. symmetric pair
D. key pair
E. electronic pair

Answer 20

D. key pair

Question 21

A PKI (public key infrastructure) makes use of which of the following components?
A. registration authority
B. verification authority
C. certification authority
D. all of the above
E. none of the above

Answer 21

D. all of the above

Question 22

Within a PKI (public key infrastructure), which of the following components is responsible for registering
 the details of a new user of the PKI?
A. assessment authority
B. registration authority
C. verification authority
D. certification authority
E. both A and C

Answer 22

B. registration authority

Question 23

Within a PKI (public key infrastructure), which of the following components is responsible issuing/canceling certificates for user public keys?
A. assessment authority
B. registration authority
C. verification authority
D. certification authority
E. both B and D

Answer 23

D. certification authority

Question 24

Within a PKI (public key infrastructure), which of the following components is responsible for determining
whether a certificate is valid and for what purpose it
has been issued?
A. assessment authority
B. registration authority
C. verification authority
D. certification authority
E. none of the above

Answer 24

C. verification authority

Question 25

Which of the following statements is NOT true?
A. Every key should have an expiry date.
B. Once a key has expired, a new key should be chosen and the old key should be destroyed.
C. The longer a key is in use, the less chance there is of it being compromised.
D. New keys should generally be longer than old keys.
E. Both A and D

Answer 25

C. The longer a key is in use, the less chance there is of it being compromised.