1.5 Describe Cryptography Security Components Such as Hashing, Encryption, PKI, SSL, TLS, QUIC, MASQUE, IPsec, NAT-T IPv4 for IPsec, Preshared Key, Certificate-Based Authorization, and Post-Quantum Cryptography 350-701 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company deploys a new web application that must authenticate clients using certificates issued by an internal CA. The security team wants to ensure that the TLS handshake validates the client certificate chain and that the server can verify the client's identity before granting access. Which configuration should the security team implement on the web server?

   • AInstall the server certificate in the client's trust store and enable session resumption.
   • BEnable mutual TLS (mTLS) with the CA certificate in the trust store and set the client certificate verification to 'required'.
   • CConfigure the server to use TLS 1.3 with a cipher suite that supports forward secrecy.
   • DDeploy a reverse proxy that terminates TLS and forwards requests to the application over HTTP.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An organization wants to control access to a sensitive application based on the user's identity and role. The application currently uses username/password authentication. The security team wants to implement certificate-based authorization. What must be in place for this to work?

   • AUse the certificate's serial number as the password.
   • BIssue certificates to users, configure the application to trust the issuing CA, and map certificate attributes to roles.
   • CStore the users' private keys on the application server for verification.
   • DRequire users to present their certificates over HTTP.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the main security challenge when using symmetric encryption?

   • AThe key is too long to remember.
   • BSecurely distributing the shared secret key to both parties.
   • CThe algorithm is too slow for large data.
   • DIt cannot provide confidentiality.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which property is characteristic of a cryptographic hash function?

   • AIt is reversible with the correct key.
   • BIt encrypts data to provide confidentiality.
   • CIt produces a fixed-size output regardless of input length.
   • DIt uses a public and private key pair.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which underlying protocol does MASQUE use to provide its security and multiplexing?

   • AUDP
   • BIPsec
   • CTCP
   • DQUIC
   Reveal Solution Discussion Select an answer first