CHP 4 Sec+

Question 1

Key Strength

Answer 1

There are three primary characteristics that determine the resiliency of the key to
attacks.

Question 2

Key Strength (Randomness)

Answer 2

For a key to be considered
strong, it must be random with no predictable pattern. This thwarts an attacker from attempting to uncover the key

Question 3

Key Strength (Length)

Answer 3

Shorter keys can be more
easily broken than longer keys. All the possible values for a specific key make up its
key space.

Question 4

Key Strength (Cryptoperiod)

Answer 4

Having a limited cryptoperiod helps protect the ciphertext from extended cryptanalysis and limits the exposure time if a key is compromised.

Question 5

Secret algorithm

Answer 5

Enhance security in the same way as keeping a key or password secret

Question 6

Salt

Answer 6

A value that can be used to ensure that plaintext, when hashed, will not consistently result in the same digest.

Question 7

Nonce (number used once)

Answer 7

Is an input value that must be unique within some
specified scope, such as for a given period or for an entire session.

Question 8

Initialization
vector (IV)

Answer 8

Is the most widely used algorithm input. An IV may be considered as a nonce with an additional requirement: it must be selected in a non-predictable way

Question 9

Digital certificate

Answer 9

Is a technology used to associate a user’s identity to a public key and that has been digitally signed by a trusted third party

Question 10

Certificate Repository (CR)

Answer 10

A publicly accessible centralized directory of digital certificates that can be used to view the status of a digital certificate

Question 11

Certificate Revocation

Answer 11

Digital certificates normally have an expiration date, such as one year from the date they were issued. However, there are circumstances that might be cause for the certificate to be revoked before it expires. If someone were to steal a user’s private key

Question 12

Two primary functions web server digital certificates perform

Answer 12

Ensure the authenticity of the web server to the client. Ensure the authenticity of the cryptographic connection to the web server

Question 13

Public key infrastructure (PKI)

Answer 13

Is the underlying infrastructure for the management of public keys used in digital certificates.

Question 14

Trust

Answer 14

Confidence in or reliance on another person or entity

Question 15

Third Party Trust

Answer 15

It refers to a situation in which two individuals trust each other because each trusts a third party

Question 16

Key escrow

Answer 16

Refers to a process in which keys are managed by a third party, such as a trusted CA.

Question 17

Secure Sockets Layer (SSL)

Answer 17

To create an encrypted data path between a client and a server that could be used on any platform or operating system.

Question 18

Transport Layer Security (TLS)

Answer 18

Another widespread cryptographic transport algorithm. SSL v3.0 served as the basis for TLS v1.0