CompTIA Security+ Certification Exam SY0-701 Practice Test 4

Question 1

Which of the following answers refers to a legacy symmetric-key block cipher encryption algorithm?

A) RC4
B) DES
C) RSA
D) DSA

Answer 1

B) DES

Question 2

Which of the answers listed below refers to a deprecated stream cipher used in some legacy applications, such as WEP?

A) RSA
B) DES
C) SSL
D) RC4

Answer 2

D) RC4

Question 3

Which of the following answers refers to a deprecated (largely replaced by AES) symmetric-key block cipher encryption algorithm?

A) ECDSA
B) RSA
C) IDEA
D) DSA

Answer 3

C) IDEA

Question 4

What is the recommended replacement for DES?

A)DSA
B) RSA
C) RC4
D) AES

Answer 4

D) AES

Question 5

An IV is a random or pseudorandom value used in cryptography to ensure that the same plaintext input does not produce the same ciphertext output, even when the same encryption key is used. The IV is typically used with encryption algorithms in block cipher modes to enhance security by introducing randomness to the encryption process.

A) True

B) False

Answer 5

A) True

Question 6

Which of the answers listed below refers to a logical operation commonly used in the context of cybersecurity, particularly in encryption and obfuscation techniques?

A) AND
B) OR
C) NOT
D) XOR

Answer 6

D) XOR

Question 7

Which of the following answers refers to a block cipher mode that works by chaining the ciphertext blocks together, such that each ciphertext block depends on the previous block?

A) CBC
B) GCM
C) ECB
D) CFB

Answer 7

A) CBC

Question 8

Which block mode transforms a block cipher into a stream cipher enabling the encryption of individual bits or bytes of data?

A) CFB
B) CBC
C) GCM
D) ECB

Answer 8

A) CFB

Question 9

A block cipher mode that combines a unique counter with encryption key to generate a stream of pseudorandom data blocks which are then used for encrypting data is called:

A) CBC
B) GCM
C) CFB
D) CTM

Answer 9

D) CTM

Question 10

Which of the block cipher modes listed below is the simplest/weakest and therefore not recommended for use?

A) CBC
B) GCM
C) ECB
D) CTM

Answer 10

C) ECB

Question 11

Which block cipher mode combines CTM for encryption with an authentication mechanism to ensure both data confidentiality and integrity?

A) CBC
B) GCM
C) ECB
D) CFB

Answer 11

B) GCM

Question 12

In cryptography, the number of bits in a key used by a cryptographic algorithm is referred to as key size or key length. The key length determines the maximum number of combinations required to break the encryption algorithm, therefore typically a longer key means stronger cryptographic security.

A) True

B) False

Answer 12

A) True

Question 13

Which AES key length provides the highest level of security?

A) 128-bit key
B) 192-bit key
C) 256-bit key
D) 320-bit key

Answer 13

C) 256-bit key

Question 14

Which of the following answers refers to an embedded microcontroller used for secure boot, disk encryption, and system integrity verification?

A) TPM
B) SoC
C) UEFI
D) HSM

Answer 14

A) TPM

Question 15

Which of the answers listed below refers to a piece of hardware and associated software/firmware designed to provide cryptographic and key management functions?

A) EFS
B) HSM
C) SFC
D) TPM

Answer 15

B) HSM

Question 16

Which of the following answers refers to a centralized server that is used to distribute cryptographic keys and authenticate users and services within a computer network?

A) PKI
B) RAS
C) KDC
D) NAS

Answer 16

C) KDC

Question 17

In a Kerberos-protected network, this type of secure token is granted to users during their initial login to enable them access to multiple network services without the need to re-enter their login credentials.

A) OTP
B) TGT
C) AS
D) TGS

Answer 17

B) TGT

Question 18

In cryptography and security, the term “Secure enclave” typically refers to a protected and isolated hardware or software environment within a computing device, such as a smartphone, tablet, or computer, where sensitive data and cryptographic operations can be stored and processed securely.

A) True

B) False

Answer 18

A) True

Question 19

The term “Obfuscation” is used to describe techniques employed to obscure or hide the true meaning or nature of data, making it challenging for unauthorized parties to decipher or reverse-engineer the information.

A) True

B) False

Answer 19

A) True

Question 20

What is the purpose of steganography?

A) Checking data integrity
B) Verifying hash values
C) Hiding data within another piece of data
D) Encrypting data

Answer 20

C) Hiding data within another piece of data

Question 21

In the field of data security, the term “Tokenization” refers to the process of replacing sensitive data with nonsensitive information which holds a reference to the original data and enables its processing but has no value when breached.

A) True

B) False

Answer 21

A) True

Question 22

Replacing password characters in a password field with a series of asterisks is an example of:

A) Data masking
B) Tokenization
C) Anonymization
D) Pseudo-anonymization

Answer 22

A) Data masking

Question 23

A hash function is a mathematical algorithm that maps data of arbitrary size to a fixed-size hash value, typically represented as a short string of characters. The hash function result, also known as a digest or checksum, provides a unique representation of the original data input. The functionality of hash functions relies on the fact that if there is any change to the data after the original hash was generated, the new hash value calculated after content modification will be different from the original result because hash functions are designed to be sensitive to changes in the input data.

A) True

B) False

Answer 23

A) True

Question 24

Hash functions find use in a variety of applications, including:

A) Cryptography
B) Data integrity verification
C) Password verification and storage
D) Digital signatures
E) Blockchain technology
F) All of the above

Answer 24

F) All of the above

Question 25

Which of the answers listed below refers to a cryptographic hash function that has been widely used in the past but is now considered deprecated for security-sensitive applications due to known vulnerabilities?

A) MD5
B) SHA
C) CRC
D) HMAC

Answer 25

A) MD5