Cissp Cryptography

Front 1

Cryptography does not concern itself with:
A. Availability
B. Integrity
C. Confidentiality
D. Authenticity

Back 1

A. Availability

Front 2

Kerberos depends upon what encryption method?
A. Public Key cryptography
B. Private Key cryptography
C. El Gamal cryptography
D. Blowfish cryptography

Back 2

B. Private Key cryptography

Front 3

What is the PRIMARY advantage of secret key encryption systems as compared with public key
systems?
A. Faster speed encryption
B. Longer key lengths
C. Easier key management
D. Can be implemented in software

Back 3

A. Faster speed encryption

Front 4

Cryptography does not help in:
A. Detecting fraudulent insertion
B. Detecting fraudulent deletion
C. Detecting fraudulent modifications
D. Detecting fraudulent disclosure

Back 4

D. Detecting fraudulent disclosure

Front 5

When block chaining cryptography is used, what type of code is calculated and appended to the
data to ensure authenticity?
A. Message authentication code.
B. Ciphertext authentication code
C. Cyclic redundancy check
D. Electronic digital signature

Back 5

A. Message authentication code.

Front 6

Compared to RSA, which of the following is true of elliptic curve cryptography?
A. It has been mathematically proved to be the more secure
B. It has been mathematically proved to be less secure
C. It is believed to require longer keys for equivalent security
D. It is believed to require shorter keys for equivalent security

Back 6

D. It is believed to require shorter keys for equivalent security

Front 7

The RSA algorithm is an example of what type of cryptography?
A. Asymmetric key
B. Symmetric key
C. Secret Key
D. Private Key

Back 7

A. Asymmetric key

Front 8

Public key cryptography provides integrity verification through the use of public key signature and?
A. Secure hashes
B. Zero knowledge
C. Private key signature
D. Session key

Back 8

A. Secure hashes

Front 9

Which one of the following is a technical solution for the quality of service, speed, and security
problems facing the Internet?
A. Random Early Detection (RED) queuing
B. Multi-protocol label-switching (MPLS)
C. Public Key Cryptography Standard (PKCS)
D. Resource Reservation Protocol (RSVP)

Back 9

B. Multi-protocol label-switching (MPLS)

Front 10

Which of the following is not a weakness of symmetric cryptography?
A. Limited security
B. Key distribution
C. Speed
D. Scalability

Back 10

C. Speed

Front 11

Why is public key cryptography recommended for use in the process of securing facsimiles during
transmission?
A. Keys are never transmitted over the network.
B. Data compression decreases key change frequency.
C. Key data is not recognizable from facsimile data.
D. The key is securely passed to the receiving machine.

Back 11

D. The key is securely passed to the receiving machine.

Front 12

How fast is private key cryptography compared to public key cryptography?
A. 10 to 100 times faster.
B. 100 to 1000 times faster.
C. 1000 to 10000 times faster.
D. 10000 to 20000 times faster.

Back 12

C. 1000 to 10000 times faster.

Front 13

Which of the following elements is not included in a Public Key Infrastructure (PKI)?
A. Timestamping
B. Lightweight Directory Access Protocol (LDAP)
C. Certificate revocation
D. Internet Key Exchange (IKE)

Back 13

D. Internet Key Exchange (IKE)

Front 14

The Secure European System for Applications in a Multivendor
Environment (SESAME) implements a Kerberos-like distribution of
secret keys. Which of the following is NOT a characteristic of SESAME?
A. Uses a trusted authentication server at each host
B. Incorporates two certificates or tickets, one for authentication and
one defining access privileges
C. Uses secret key cryptography for the distribution of secret keys
D. Uses public key cryptography for the distribution of secret keys

Back 14

C. Uses secret key cryptography for the distribution of secret keys

Front 15

Using symmetric key cryptography, Kerberos authenticates clients to
other entities on a network and facilitates communications through the
assignment of:
A. Tokens.
B. Passwords.
C. Public keys.
D. Session keys.

Back 15

D. Session keys.

Front 16

How is authentication implemented in GSM?
A. Using public key cryptography
B. It is not implemented in GSM
C. Using secret key cryptography
D. Out-of-band verification

Back 16

C. Using secret key cryptography

Front 17

In public key cryptography,
A. The public key is used to encrypt and decrypt.
B. Only the private key can encrypt and only the public key can decrypt.
C. If the public key encrypts, then only the private key can decrypt.
D. Only the public key can encrypt and only the private key can decrypt.

Back 17

C. If the public key encrypts, then only the private key can decrypt.

Front 18

Elliptic curves, which are applied to public key cryptography, employ
modular exponentiation that characterizes the:
A. Knapsack problem.
B. Elliptic curve modular addition.
C. Elliptic curve discrete logarithm problem.
D. Prime factors of very large numbers.

Back 18

C. Elliptic curve discrete logarithm problem.

Front 19

In a hybrid cryptographic system, usually:
A. Digital certificates cannot be used.
B. Neither public key nor private key cryptography is used.
C. Public key cryptography is used for the encryption of the message.
D. Private key cryptography is used for the encryption of the message.

Back 19

D. Private key cryptography is used for the encryption of the message.

Front 20

In a hybrid cryptographic system, usually:
A. Digital certificates cannot be used.
B. Neither public key nor private key cryptography is used.
C. Public key cryptography is used for the encryption of the message.
D. Private key cryptography is used for the encryption of the message.

Back 20

D. Private key cryptography is used for the encryption of the message.

Front 21

In most security protocols that support authentication, integrity and confidentiality,
A. Public key cryptography is used to create digital signatures.
B. Private key cryptography is used to create digital signatures.
C. Digital signatures are not implemented.
D. DES is used to create digital signatures.

Back 21

A. Public key cryptography is used to create digital signatures.

Front 22

Which of the following is NOT an issue with secret key cryptography?
A. Compromise of the keys can enable the attacker to impersonate the
key owners and, therefore, read and send false messages.
B. A networked group of m users with separate keys for each pair of
users will require m (m-1)/2 keys.
C. Security of the certification authority.
D. Secure distribution of the keys.

Back 22

C. Security of the certification authority.

Front 23

The theft of a laptop poses a threat to which tenet of the C.I.A. triad?
A. All of the above
B. Availability
C. Integrity
D. Confidentiality

Back 23

A. All of the above

Front 24

What are the three fundamental principles of security?
A. Accountability, confidentiality, and integrity
B. Confidentiality, integrity, and availability
C. Integrity, availability, and accountability
D. Availability, accountability, and confidentiality

Back 24

B. Confidentiality, integrity, and availability

Front 25

Making sure that the data is accessible when and where it is needed is which of the following?
A. Confidentiality
B. integrity
C. acceptability
D. availability

Back 25

D. availability

Front 26

Which of the following describes elements that create reliability and stability in networks and
systems and which assures that connectivity is accessible when needed?
A. Availability
B. Acceptability
C. Confidentiality
D. Integrity

Back 26

A. Availability

Front 27

The technique of confusion, proposed by Claude Shannon, is used in block ciphers to:
A. Conceal the statistical connection between ciphertext and plaintext.
B. Implement transposition to obtain the ciphertext.
C. Spread the influence of a plaintext character over many ciphertext characters.
D. Limit the influence of a plaintext character across ciphertext characters.

Back 27

A. Conceal the statistical connection between ciphertext and plaintext.

Front 28

In a block cipher, diffusion can be accomplished through:
A. Nonlinear S-boxes
B. Substitution
C. Permutation
D. XORing

Back 28

C. Permutation

Front 29

In a block cipher, diffusion:
A. Conceals the connection between the ciphertext and plaintext
B. Is usually implemented by non-linear S-boxes
C. Spreads the influence of a plaintext character over many ciphertext
characters
D. Cannot be accomplished

Back 29

C. Spreads the influence of a plaintext character over many ciphertext
characters

Front 30

Which is an extremely powerful type of substitution cipher.
A. Running key cipher
B. One-time pad
C. Steganography
D. Cipher block chaining

Back 30

B. One-time pad

Front 31

What are two types of ciphers?
A. Transposition and Permutation
B. Transposition and Shift
C. Transposition and Substitution
D. Substitution and Replacement

Back 31

C. Transposition and Substitution

Front 32

The classic Caesar cipher is a:
A. Code group.
B. Transposition cipher.
C. Monoalphabetic cipher.
D. Polyalphabetic cipher.

Back 32

C. Monoalphabetic cipher.

Front 33

Which of the following ciphers is a subset of the Vignere polyalphabetic cipher?
A. Caesar
B. Jefferson
C. Alberti
D. SIGABA

Back 33

A. Caesar

Front 34

What is the result of the Exclusive Or operation, 1XOR 0?
A. 1
B. Indeterminate
C. 10
D. 0

Back 34

A. 1

Front 35

Ablock cipher:
A. Converts a variable-length of plaintext into a fixed length ciphertext.
B. Is an asymmetric key algorithm.
C. Encrypts by operating on a continuous data stream.
D. Breaks a message into fixed length units for encryption.

Back 35

D. Breaks a message into fixed length units for encryption.

Front 36

Which of the following is NOT an advantage of a stream cipher?
A. The same equipment can be used for encryption and decryption.
B. It is amenable to hardware implementations that result in higher
speeds.
C. Since encryption takes place bit by bit, there is no error propagation.
D. The receiver and transmitter must be synchronized.

Back 36

D. The receiver and transmitter must be synchronized.

Front 37

In an expert system, the process of beginning with a possible solution and using the knowledge in the knowledge base to justify the solution based on the raw input data is called:
A. Forward chaining
B. Dynamic reasoning
C. A blackboard solution
D. Backward chaining

Back 37

D. Backward chaining

Front 38

Which expert system operating mode allows determining if a given hypothesis is valid?
A. Vertical chaining
B. Lateral chaining
C. Forward chaining
D. Backward chaining

Back 38

D. Backward chaining

Front 39

The repeated use of the algorithm to encipher a message consisting of many blocks is called
A. Cipher feedback
B. Elliptical curve
C. Cipher block chaining
D. Triple DES

Back 39

C. Cipher block chaining

Front 40

How many rounds are used by DES?
A. 16
B. 32
C. 64
D. 48

Back 40

A. 16

Front 41

Which of the following is the most secure form of triple-DES encryption?
A. DES-EDE3
B. DES-EDE1
C. DES-EEE4
D. DES-EDE2

Back 41

A. DES-EDE3

Front 42

Which is a characteristic of IDEA?
A. 56 bytes
B. 64 bits
C. 64 bytes
D. All of the above
E. None of the above

Back 42

B. 64 bits

Front 43

Which of the following is an example of a symmetric key algorithm?(Choose all that apply)
A. Rijndael
B. RSA
C. Diffie-Hellman
D. Knapsack
E. IDEA

Back 43

A. Rijndael
E. IDEA

Front 44

Which of the following is a symmetric block ciphers?
A. RSA
B. Blow Fish
C. RC5
D. El Gamal

Back 44

B. Blow Fish

Front 45

The RSA algorithm is an example of what type of cryptography?
A. Asymmetric key
B. Symmetric key
C. Secret Key
D. Private Key

Back 45

A. Asymmetric key

Front 46

Which one of the following is an asymmetric algorithm?
A. Data Encryption Algorithm.
B. Data Encryption Standard
C. Enigma
D. Knapsack

Back 46

D. Knapsack

Front 47

Asymmetric encryption uses:
A. pulbic keys
B. Private keys
C. is used for digital signatures
D. uses one way functions

Back 47

all of the above

Front 48

Symmetric Encryption
a. uses one key for encryption
b. PGP
c. it is fast

Back 48

all of the above

Front 49

What do the message digest algorithms MD2, MD4 and MD5 have in
common?
A. They are all used in the Secure Hash Algorithm (SHA).
B. They all take a message of arbitrary length and produce a message
digest of 128-bits.
C. They all take a message of arbitrary length and produce a message
digest of 160-bits.
D. They are all optimized for 32-bit machines.

Back 49

B. They all take a message of arbitrary length and produce a message
digest of 128-bits.

Front 50

What size is an MD5 message digest (hash)?
A. 128 bits
B. 160 bits
C. 256 bits
D. 128 bytes

Back 50

A. 128