Explain Encryption Methods and Applications 100-160 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A user is accessing a web application over a public Wi-Fi network. The application uses HTTPS. What does HTTPS protect in this scenario?

   • AThe user's identity from the server
   • BThe confidentiality of data transmitted between the browser and the server
   • CThe data stored on the server
   • DThe data stored on the user's device
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which component of a digital certificate is used to verify that the certificate itself has not been tampered with?

   • AThe certificate's serial number
   • BThe certificate's validity period
   • CThe issuer's digital signature
   • DThe subject's public key
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is a key factor that makes an encryption algorithm considered 'strong'?

   • AIt uses a sufficiently large key size and has no known practical attacks.
   • BIt is faster than other algorithms regardless of key size.
   • CIt has been used for many years without being broken.
   • DThe algorithm is proprietary and not publicly documented.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An organization wants to deploy a private PKI for internal applications. They need to issue certificates to employees and revoke them when employees leave. Which PKI component is responsible for revoking certificates?

   • ARegistration authority (RA)
   • BThe certificate's subject name
   • CCertificate revocation list (CRL) published by the CA
   • DThe certificate holder's private key
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security engineer is designing a password storage system. They want to store passwords in a way that is resistant to brute-force attacks if the database is compromised. Which approach is the most secure?

   • AStore passwords using reversible encryption with a strong key
   • BStore passwords using a salted, slow hash function like bcrypt
   • CStore passwords using MD5 with a unique salt
   • DStore passwords in plaintext but restrict database access
   Reveal Solution Discussion Select an answer first