Cissp - Cryptograpy 2

Front 1

Blowfish is a symmetric block cipher that works on

Back 1

64 -bit blocks of data and the key length of anywhere from 32 bits up to 448 bits.

Front 2

In a Blowfish (symmetric block cipher) the data blocks go through

Back 2

16 rounds of cryptographic functions

Front 3

Bruce Schneier, the creator of blowfish has stated

Back 3

Blowfish is un-patented, and will be remain so in all countries. The algorithm is placed in the public domain

Front 4

RC4 (symmetric system) is one of the most commonly implemented

Back 4

Stream Ciphers.

Front 5

RC4 (Stream Cipher has a

Back 5

Variable Key size and is used is SSL Protocol

Front 6

RC4 was created by Ron Rivest in 1987 and was considered a trade secret for

Back 6

RSA Data Security, Inc. until someone posted the source code on a miling list.

Front 7

The stolen code of RC4 is sometimes implemented and refered to as

Back 7

ArcFour or ARC4 because RC4 is trademarked.

Front 8

RC4 algorithm is

Back 8

Very Simple, Fast, and Efficient, which is why is became so popular.

Front 9

What is the maximum key size for the RC5 algorithm (a blocke cipher)?

Back 9

2040 bit. The block sizes used in RC5 are 32, 64 or 128 bits and the KEY size goes up to 2048 bits.

Front 10

RC5 has a variety of parameters it can use for block size, key size and the number of rounds used.

Back 10

The number of rounds can go up to 255

Front 11

RC6 is a block cipher that was built upon

Back 11

RC5. RC6 has all the attributes of RC5

Front 12

What attribute is included in a X.509-certificate?

Back 12

Distinguished name of the subject

Front 13

What kind of certificate is used to validate a user identity?

Back 13

Public key certificate

Front 14

A code, as is pertains to cryptography:

Back 14

Deals with linguistic units.

Front 15

What is the primary role of smartcards in a PKI?

Back 15

Tamper resistant, mobile storage and application of private keys of the users

Front 16

Which protocols that provide integrity and authentication for IPSec, can also provide non-repudiation in IPSec?

Back 16

Authentication Header (AH)

Front 17

Block ciphers operates on

Back 17

- Fixed-size blocks of plaintext
- More suitable for software than hardware implementations
- Block ciphers can be operated as a stream.

Front 18

Block Ciphers work of blocks of bits and

Back 18

Stream Ciphers work on one bit at a time

Front 19

Symmetric algorithm is used for

Back 19

Bulk encryption, which means encrypting files and communication paths

Front 20

Asymmetric Algorithm is used for

Back 20

Key Distribution and Digital signatures

Front 21

The Security service provided by Symmetric systems is

Back 21

Confidentiality

Front 22

The Security service provided Asymmetric systems are

Back 22

Authentication and nonrepudation

Front 23

Hybrid Encryption Methods is

Back 23

The Use of public key encryption to secure a secret key, and message encryption using the secret key

Front 24

In a message digest

Back 24

- The original file cannot be created from the message digest.
- Two different files should not have the same message digest
- Messages digests are usually of fixed size.

Front 25

A strong Cipher contains the right level of two main attributes namely

Back 25

Confussion and Diffusion

Front 26

Confusion is mainly carried out through

Back 26

Substitution

Front 27

Diffussion is mainly carried out through

Back 27

Transposition

Front 28

In a block Cipher the Randomness of the key values and the complexity of the mathematical functions dictate the

Back 28

Level of Confusion and Diffusion involved

Front 29

Diffusion takes place as individual bits of blocks are

Back 29

Scrambled, or diffused throughout that block

Front 30

Confusion is provided by carryoing out

Back 30

Complex substitution functions

Front 31

Block Ciphers use Diffusion and

Back 31

Confusion in their methods

Front 32

The block Cipher algorithm has two has TWO layers of Four-bit substitution boxes called

Back 32

S-boxes. Each S-box contains a lookup table used by the algorithm as instructions on how the bits should be encrypted

Front 33

Most block ciphers work with blocks of

Back 33

32, 64 or 128 bits

Front 34

A block of cipher perfoms

Back 34

Mathematical functions on on blocks of bits

Front 35

A stream Cipher treats a message as a stream of bits and

Back 35

Performs Mathematical functions on each bit individually

Front 36

When using a stream cipher, a Plaintext bit will be transformed into a

Back 36

Different Ciphertext bit each time it is encypted

Front 37

Stream Ciphers use Keystream generators

Back 37

Keystream generators

Front 38

Keystream generators produce

Back 38

A Stream of bits that is XORed with the plaintext bits to produce Ciphertext

Front 39

A one-way hash is a function that takes a Variable-Length string and a message and produces a

Back 39

Fixed-Length value called a Hash Value

Front 40

The hashing one-way function takes place without the use of

Back 40

Any keys

Front 41

The hashing algorith is not a secret - it is publicly known. The secrecy of the

Back 41

One-way hashing function is its "One-Wayness". One way-hash functions are never used in reverse like the one-way function used in public key cryptography in which the security provided is based not knowing a trapdoor

Front 42

What algorithm was DES derived from?

Back 42

Lucifer.

Front 43

Which ASYMMETRIC encryption algorithms is based on the difficulty of FACTORING LARGE NUMBERS?

Back 43

RSA

Front 44

Multipurpose Internet Mail Extension (MIME) is a technical specification indicating how

Back 44

Multimedia data and e-mail attachments are to be transferred.

Front 45

If a messgae or document contains a Binary attachment

Back 45

Multipurpose Internet Mail Extension (MIME) dictates how that portion of the messgae should be handled.

Front 46

Secure Multipurpose Internet Mail Extension (S/MIME) is a standard for

Back 46

Encrypting and digitally signing electonic mail and for providing secure data transmissions.

Front 47

S/MIME follows the

Back 47

Public Key Cryptography Standards (PKCS)

Front 48

S/MIME provides Confidentiality through

Back 48

Encryption algorithms

Front 49

S/MIME provides Integrity through

Back 49

Hashing algorithms

Front 50

S/MIME provides Authentication through the use of

Back 50

X.509 public key certificates

Front 51

S/MIME provides Nonrepudation through

Back 51

Cryptographically signed message digests

Front 52

Which is NOT a suitable method for distributing certificate revocation information?

Back 52

CA revocation mailing list

Front 53

suitable method for distributing certificate revocation information are

Back 53

- Delta CRL
- OCSP (online certificate status protocol)
- Distribution point CRL

Front 54

Which statements pertaining to stream ciphers is correct?

Back 54

A stream cipher generates what is called a keystream.

Front 55

True 3DES mods are

Back 55

- DES-EEE2 uses two keys
-DES-EEE3 uses three keys
-DES-EDE2 uses two keys
-DES-EDE3 uses three keys

Front 56

What does the directive of the European Union on Electronic Signatures deal with?

Back 56

Non repudiation

Front 57

Which would best define a Digital envelope?

Back 57

A message encrypted with a secret key attached with the message. The secret key is encrypted with the public key of the receiver.

Front 58

The use of Symmetric and Asymmetric cryptography together can be referred to as a

Back 58

Hybrid approach, But more commonly as a Digital Envelope

Front 59

What kind of Encryption technology does Verisign's SSL utilize?

Back 59

Hybrid: Symmetric and asymmetric cryptography

Front 60

IPsec is a framework that permits flexibility in choosing particular hashing, encryption, or key exchange mechanisms.

Back 60

Depending on the implementation, key exchange may be a manual process or an automated one.

Front 61

Internet Key Exchange (IKE). is a

Back 61

Key exchange protocol that may be used in conjunction with ISAKMP.

Front 62

ISAKMP is the key management protocol typically used with

Back 62

IPsec, but ISAKMP intentionally excludes selection of any particular key exchange method.

Front 63

Diffie-Hellman is a widely-used

Back 63

Key exchange algorithm used by IKE.

Front 64

What can be defined as secret communications where the very existence of the message is hidden?

Back 64

Steganography

Front 65

Key clustering is a situation in which a plaintext message generates

Back 65

Identical ciphertext messages using the same transformation algorithm but with different keys

Front 66

What type of attack against confidentiality uses algorithm and algebraic manipulation weaknesses to reduce complexity?

Back 66

Analytic

Front 67

A statistical attack uses a

Back 67

Statistical weakness in the design.

Front 68

A brute-force attack is a type of attack under which

Back 68

Every possible combination of keys and passwords is tried

Front 69

In a codebook attack, an attacker attempts to

Back 69

Create a codebook of all possible transformations between plaintext and ciphertext under a single key.

Front 70

Digital signature is a

Back 70

Value computed with a cryptographic algorithm and appended to a data object in such a way that any recipient of the data can use the signature to verify the data's origin and integrity

Front 71

What is the range of SSL (Secure Sockets Layer) 'session key' lengths?

Back 71

40 bit to 256 bit

Front 72

TCP/IP protocol: TCP protocol controls the handsking and maintains the connection between been the User and the Server and the

Back 72

IP protocol makes sure the file is routed properly throughout the Internet to get from the web server to the user.

Front 73

HTTP is a stateless protocol which means

Back 73

The Client and the Web Server make and break a connection for each other operation.

Front 74

HTTP Secure (HTTPS) is

Back 74

HTTP running over SSL..
- HTTP works at the application layer
- SSL works at the Transport Layer.

Front 75

Secure Sockets Layer (SSL) uses Public Key Encryptions and provides

Back 75

-Data Encryption
-Server Authentication
-Message Integrity and
- Optional Client Authentication

Front 76

A FIN Packet in (SSL) is an indication

Back 76

to close out the commnucation channel sent by the CLient to the server

Front 77

SSL requires an SSL-enabled server and browser. SSL provides security for the connection but does not offer

Back 77

Security for the data ONCE received. This means the data are encrypted while being transmitted, but not after the data is received.

Front 78

In the protocol stack, SSL lies beneath the Application layer and

Back 78

And above the Network layer. This ensures that SSL is NOT limited to specific application protocols and can still use the communication transport standards of the Internet

Front 79

For CISSP Exam SSL protocol works at the

Back 79

Transport Layer (SSL is currently in Version 3)

Front 80

Since SSL was developed by Netscape it is NOT

Back 80

an Open-Community protocol.

Front 81

The Open-Community version of SSL is

Back 81

Transport Layer Security (TLS)

Front 82

S-HTTP is a Technology that protects EACH message sent between two computers while

Back 82

HTTPS protects the Communication Channel between two computers messages and all.

Front 83

SSL Key lengths vary in size. Older browsers only support 40/56 bit key lengths but

Back 83

Newer browsers such as I.E.6.0, Mozillia, and Firefox now support up to 256 bit encryption keys.

Front 84

A public-key certificate binds

Back 84

a subject name to a public key value, along with information needed to perform certain cryptographic functions.

Front 85

An attribute certificate is a

Back 85

digital certificate that binds a set of descriptive data items, other than a public key, either directly to a subject name or to the identifier of another certificate that is a public-key certificate

Front 86

Kerberos depends upon what encryption method?

Back 86

Secret Key cryptography.

Front 87

Kerberos is an Authentication protocol designed in the mid 1980 as part of the MIT's Project Athena. IT works in a

Back 87

Client/Server Model and is based on Symmetric Key Cryptography (Secret Key)

Front 88

Kerberos has been used for many years in UNIX systems and is currently the defaut

Back 88

Authentication methods for Windows, 200, 2003 and 2008 operating systems

Front 89

Kerberos is an example of a

Back 89

Single sign-on system for distributed environments and is a de facto standard for heterogeneous networks

Front 90

Kerberos uses sysmetrik key cryptography and provides

Back 90

End-to-End security.

Front 91

The Most important Component within a Kerberos Environment is the

Back 91

Key Distribution Center (KDC).
-KDC holds all users's and services secret keys.
- KDC provides an authentication service as well as a Key distribution functionality.

Front 92

In a SSL session between a client and a server, who is responsible for generating the master secret that will be used as a seed to generate the symmetric keys that will be used during the session?

Back 92

The client's browser

Front 93

Secure Sockets Layer (SSL) uses a Message Authentication Code (MAC) for what purpose?

Back 93

Message integrity.

Front 94

A keyed hash also called a MAC (message authentication code) is used for

Back 94

Integrity protection.

Front 95

What is called the standard format that was established to set up and manage Security Associations (SA) on the Internet in IPSec?

Back 95

Internet Key Exchange (IKE)

Front 96

The Key management for IPSec is called the

Back 96

Internet Key Exchange (IKE)

Front 97

The IKE protocol is a hybrid of three other protocols:

Back 97

- ISAKMP (Internet Security Association and Key Management Protocol)
- Oakley and
- SKEME.

Front 98

ISAKMP provides a framework for

Back 98

Authentication and Key exchange, but does not define them (neither authentication nor key exchange).

Front 99

The Oakley protocol describes

Back 99

A series of modes for key exchange

Front 100

The SKEME protocol defines

Back 100

Key exchange techniques.

Front 101

IKE provides authentication of the IPSec peers,

Back 101

Negotiates IPSec keys, and negotiates IPSec security associations.

Front 102

IKE automatically negotiates IPSec security associations (SAs) and enables

Back 102

IPSec secure communications without costly manual preconfiguration.

Front 103

IKE provides these benefits:

Back 103

- Eliminates the need to manually specify all the IPSec security parameters in the crypto maps at both peers.
- Allows you to specify a lifetime for the IPSec security association
- Allows encryption keys to change during IPSec sessions
- Allows IPSec to provide anti-replay services.
-Permits certification authority (CA) support for a manageable, scalable IPSec implementation.
- Allows dynamic authentication of peers.

Front 104

ISAKMP provides a framework for Internet key management and provides the specific protocol support for negotiation of security attributes.

Back 104

Alone, it does not establish session keys. However it can be used with various session key establishment protocols, such as Oakley, to provide a complete solution to Internet key management

Front 105

When ISAKMP is used with Oakley,

Back 105

Key escrow is not feasible.

Front 106

The Oakley protocol uses a hybrid Diffie-Hellman technique to establish session keys on Internet hosts and routers.

Back 106

Oakley provides the important security property of Perfect Forward Secrecy (PFS) and is based on cryptographic techniques that have survived substantial public scrutiny. Oakley can be used by itself, if no attribute negotiation is needed, or Oakley can be used in conjunction with ISAKMP

Front 107

IPSec is a framework of open standards developed by the Internet Engineering Task Force (IETF) that provides

Back 107

Security for transmission of Sensitive information over unprotected networks such as the Internet. It acts at the network level

Front 108

IPSec implements the following standards:

Back 108

IPSec, Internet Key Exchange (IKE) , Data Encryption Standard (DES)
, MD5 (HMAC variant) , SHA (HMAC variant)
, Authentication Header (AH) , Encapsulating Security Payload (ESP)

Front 109

IPSec services provide a robust security solution that is standards-based. IPSec also provides

Back 109

Data authentication and anti-replay services in addition to data confidentiality services.

Front 110

SKEME constitutes a compact protocol that supports a variety of realistic scenarios and security models over Internet. It provides

Back 110

Clear tradeoffs between security and performance as required by the different scenarios without incurring in unnecessary system complexity. The protocol supports key exchange based on public key, key distribution centers, or manual installation, and provides for fast and secure key refreshment.

Front 111

SKEME selectively provides perfect forward secrecy, allows for replaceability and

Back 111

Negotiation of the underlying cryptographic primitives, and addresses privacy issues as anonymity and repudiatability

Front 112

SKEME's basic mode is based on the use of public keys and a

Back 112

Diffie-Hellman shared secret generation.
However, SKEME is not restricted to the use of public keys, but also allows the use of a pre-shared key

Front 113

There are parallels between the trust models in Kerberos and Public Key Infrastructure (PKI). When we compare them side by side, Kerberos tickets correspond most closely to which of the following?

Back 113

Public-key certificates

Front 114

A Kerberos ticket is issued by a trusted third party. It is an encrypted data structure that includes the

Back 114

Service encryption key. In that sense it is similar to a public-key certificate. However, the ticket is not key.

Front 115

Properties of the Rijndael block cipher algorithm

Back 115

- It employs a round transformation that is comprised of three layers of distinct and invertible transformations.
- It is suited for high speed chips with no area restrictions
- It could be used on a smart card.

Front 116

IDEA cipher algorithm operates on

Back 116

64-bit plaintext blocks and uses a 128 bit key.

Front 117

Rijndael block cipher uses

Back 117

128, 192 or 256 bits.

Front 118

Secure Sockets Layer (SSL) provides security services at which layer of the OSI model?

Back 118

Transport Layer

Front 119

Brute force attacks against encryption keys have increased in potency because of increased computing power. Which of the following is often considered a good protection against the brute force cryptography attack?

Back 119

The use of session keys.

Front 120

Which type of algorithm is considered to have the highest strength per bit of key length of any of the asymmetric algorithms?

Back 120

Elliptic Curve Cryptography (ECC)

Front 121

Which is the most secure form of triple-DES encryption?

Back 121

DES-EDE3

Front 122

Which is best be defined as a cryptanalysis technique in which the analyst tries to determine the key from knowledge of some plaintext-ciphertext pairs?

Back 122

A known-plaintext attack

Front 123

What are two types of ciphers?

Back 123

Transposition and Substitution

Front 124

In a Public Key Infrastructure (PKI) context, which is a Primary concern with LDAP servers?

Back 124

Availability

Front 125

Strong" encryption means

Back 125

128-bit or longer key.

Front 126

You've decided to identify the agent who initiated any particular transfer. You can do this by

Back 126

Having the agent encrypt the hash with his private key.

Front 127

What kind of encryption is realized in the S/MIME-standard?

Back 127

Public key based, hybrid encryption scheme

Front 128

The Diffie-Hellman algorithm is primarily used to provide

Back 128

Key exchange

Front 129

Pre shared key authentication within IKE/IPSec Protocol is normally based on

Back 129

Simple passwords

Front 130

Within IKE / IPsec protocol Only

Back 130

One preshared key for all VPN connections is needed

Front 131

How many bits is the effective length of the key of the Data Encryption Standard algorithm

Back 131

56 bits

Front 132

Internet Security Association and Key Management Protocol (ISAKMP) is an

Back 132

Internet IPsec protocol to negotiate, establish, modify, and delete security associations, and to exchange key generation and authentication data, independent of the details of any specific key generation technique, key establishment protocol, encryption algorithm, or authentication mechanism.

Front 133

Simple Key-management for Internet Protocols (SKIP) is a

Back 133

Key distribution protocol that uses hybrid encryption to convey session keys that are used to encrypt data in IP packets

Front 134

What size is an MD5 message digest (hash)?

Back 134

128 bits

Front 135

What can be defined as a data structure that enumerates digital certificates that were issued to CAs but have been invalidated by their issuer prior to when they were scheduled to expire?

Back 135

Authority revocation list

Front 136

Certificate revocation list (CRL)

Back 136

A data structure that enumerates digital certificates that have been invalidated by their issuer prior to when they were scheduled to expire.

Front 137

Authority revocation list (ARL)

Back 137

A data structure that eumerates digital certificates that were issued "TO CAs but have been invalidated" by their issuer prior to when they were scheduled to expire.

Front 138

Authentication methodS within IKE and IPsec

Back 138

- Pre shared key
- Certificate based authentication
- Public key authentication

Front 139

PGP uses which of the following to encrypt DATA (NOTE date is the key word)?

Back 139

A symmetric encryption algorithm BUT it use Asymmetric key algorithm to encrypt KEYS for distribution.

Front 140

Which BEST provides e-mail message authenticity and confidentiality?

Back 140

Signing the message using the sender's private key and encrypting the message using the receiver's public key

Front 141

Which offers security to wireless communications?

Back 141

Wireless Transport Layer Security (WTLS)

Front 142

Electronic signatures can PREVENT messages from being:

Back 142

Repudiated

Front 143

Digital signature standard (DSS) provides

Back 143

- Integrity
- Digital signature
- Authentication

Front 144

What is called the substitution cipher that shifts the alphabet by 13 places?

Back 144

ROT13 cipher

Front 145

The computations involved in selecting keys and in enciphering data are complex, and are not practical for manual use. However, using mathematical properties of modular arithmetic and a method known as

Back 145

"Computing in Galois fields" RSA is quite feasible for computer use.

Front 146

In a known plaintext attack, the cryptanalyst has knowledge ?

Back 146

Both the plaintext and the associated ciphertext of several messages

Front 147

What principle involves encryption keys being separated into two components, each of which does not reveal the other

Back 147

Split knowledge

Front 148

A Public Key Infrastructure (PKI) is responsible for

Back 148

Issuing, locating, validating, renewing, and revoking certificates.

Front 149

Which should be used as a replacement for Telnet for secure remote login over an insecure network?

Back 149

SSH

Front 150

Which would best describe a Concealment cipher?

Back 150

Every X number of words within a text, is a part of the real message.

Front 151

Which of the following can best define the "revocation request grace period"?

Back 151

Time period between the arrival of a revocation request and the publication of the revocation information

Front 152

Which is defined as a key establishment protocol based on the Diffie-Hellman algorithm proposed for IPsec but superseded by IKE?

Back 152

OAKLEY

Front 153

SKIP is a key distribution protocol

Back 153

Hybrid encryption to convey session keys that are used to encrypt data in IP packets.

Front 154

How long is a DES key sequence?

Back 154

8 Bits

Front 155

What is another known for a Parity Key

Back 155

Key Sequence?

Front 156

Which is a protocol used to enable two users using symmetric encryption to exchange a secret key (session key) over an insecure medium without any prior secrets? The negotiated key will subsequently be used for message encryption.

Back 156

Diffie_Hellmann

Front 157

The Diffie-Hellman key agreement protocol is also called

Back 157

The Exponential key agreement

Front 158

The Diffie-Hellaman protocol has two system parameters p and g.

Back 158

They are both public and may be used by all the users in a system. Parameter p is a prime number and parameter g (usually called a generator) is an integer less than p, with the following property: for every number n between 1 and p-1 inclusive, there is a power k of g such that n = gk mod p

Front 159

The Deffie-Hellman protocol depends on the

Back 159

Discrete logarithm problem for its security. But The Diffie-Hellman key exchange is vulnerable to a man-in-the-middle attack

Front 160

Which of the following would best describe a Concealment cipher?

Back 160

Every X number of words within a text, is a part of the real message.

Front 161

Which identifies the encryption algorithm selected by NIST for the new Advanced Encryption Standard?

Back 161

Rijndael

Front 162

Rijndael is the new approved method of

Back 162

Sensitive but unclassified information for the U.S. government. and is also widely used in the public arena as well.

Front 163

Rijndael (for AES) has

Back 163

Low memory requirements and has been constructed to easily defend against timing attacks.

Front 164

What can be defined as a value computed with a cryptographic algorithm and appended to a data object in such a way that any recipient of the data can use the signature to verify the data's origin and integrity?

Back 164

A digital signature

Front 165

What can be defined as a digital certificate that binds a set of descriptive data items, other than a public key, either directly to a subject name or to the identifier of another certificate that is a public-key certificate?

Back 165

An attribute

Front 166

A public-key certificate binds a

Back 166

Subject name to a public key value, along with information needed to perform certain cryptographic functions.

Front 167

What is related to a Public key infrastructure (PKI)?

Back 167

- A Certificate authority
- A Registration authority
- A X.509 certificate

Front 168

A Ticket Granting Service is a part of

Back 168

Kerberos and not PKI

Front 169

PKI provides

Back 169

Authentication, confidentiality, nonrepudiation, and integrity of the messages exchanged.

Front 170

PKI is a

Back 170

Hybrid system of symmetric and asymmetric key algorithms and methods.

Front 171

Which DES modes can best be used for authentication?

Back 171

Cipher Block Chaining and Cipher Feedback.
Because both Cipher Block Chaining and Cipher Feedback create a key that is dependent of the previous block and the final block serves as a Message Authentication Code

Front 172

Electronic Code Book (ECB) is basic

Back 172

Encryption method that provides privacy but not authentication.

Front 173

Which techniques is used in the ENCRYPTION of data between a web browser and server?

Back 173

SSL

Front 174

You've decided to identify the agent who initiated any particular transfer. You can do this by:

Back 174

Having the agent encrypt the hash with his private key.

Front 175

Why does a digital signature CONTAIN a message digest?

Back 175

To detect any alteration of the message

Front 176

What is the role of IKE within the IPsec protocol?

Back 176

Peer authentication and key exchange

Front 177

What is the range of SSL (Secure Sockets Layer) 'session key' lengths?

Back 177

40 bit to 256 bit

Front 178

What is the maximum key size for the RC5 algorithm?

Back 178

2040 bits

Front 179

Which of the following are suitable protocols for securing VPN connections at the lower layers of the OSI model?

Back 179

IPsec and L2TP

Front 180

What is the main problem of the renewal of a root CA certificate?

Back 180

It requires the authentic distribution of the new root CA certificate to all PKI participants

Front 181

Secure Sockets Layer (SSL) provides security services at which layer of the OSI model?

Back 181

Transport Layer

Front 182

What is called the standard format that was established to set up and manage Security Associations (SA) on the Internet in IPSec?

Back 182

Internet Key Exchange (IKE)

Front 183

Which of the following algorithms is used today for encryption in PGP?

Back 183

IDEA

Front 184

The Diffie-Hellman algorithm is used for:

Back 184

Key agreement

Front 185

Compared to RSA, which of the following is true of Elliptic Curve Cryptography(ECC)?

Back 185

It is believed to require shorter keys for equivalent security.

Front 186

Which type of attack is based on the probability of two different messages using the same hash function producing a common message digest?

Back 186

Birthday attack

Front 187

Key management protocol are?

Back 187

- ISAKMP
- Diffie-Hellman
- KEA

Front 188

The Data Encryption Algorithm performs how many rounds of substitution and permutation?

Back 188

16

Front 189

Secure Sockets Layer (SSL) uses a Message Authentication Code (MAC) for what purpose?

Back 189

Message integrity.

Front 190

Which of the following OSI layers provides non-repudiation services?

Back 190

Application layer

Front 191

ExampleS of a block cipher

Back 191

- Skipjack
- IDEA
- Blowfish

Front 192

RC4 is NOT a

Back 192

Block Cipher

Front 193

Algorithms used in Rijndael

Back 193

- Non-linear layer
- Key addition layer
- The linear mixing layer

Front 194

What is the RESULT of a hash algorithm being applied to a message ?

Back 194

A message digest

Front 195

Which of the following techniques is used in the ENCRYPTION of data between a web browser and server?

Back 195

SSL

Front 196

Symmetric Key Algorithm is also known as

Back 196

- Secret Key
- Private Key
- Single Key
- Shared Key
- One Key

Front 197

A X.509 public key certificate with the key usage attribute "non repudiation" can be used for which of the following?

Back 197

Verifying signed messages

Front 198

A one-way hashing function does NOT

Back 198

Authentication & Confidentiality.

Front 199

A one way hashing function can only be use for the

Back 199

Integrity of a message

Front 200

Attributes pertaining to PPTP (Point-to-Point Tunneling Protocol

Back 200

- PPTP is able to only handle IP networks.
- PPTP does not provide strong encryption
- PPTP does not support any token-based authentication method for users.