Encryption ACCISO Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A user receives an email with a link to a website that looks like their bank's login page. The page uses HTTPS, but the user is suspicious. Which attack is most likely?

   • AA side-channel attack on the user's computer
   • BA phishing site with a valid-looking certificate from a rogue CA
   • CA brute-force attack on the bank's encryption key
   • DA denial-of-service attack on the bank
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which cryptographic attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge?

   • ABirthday attack
   • BSide-channel attack
   • CBrute force attack
   • DMan-in-the-middle attack
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A software company releases a signed update. A user wants to verify that the update is authentic and has not been tampered with. What does the user need?

   • AA symmetric key shared with the company
   • BThe hash of the update only
   • CThe company's public key and the signature
   • DThe company's private key
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How is a digital signature typically created?

   • ABy encrypting the message with the recipient's public key.
   • BBy encrypting the hash of the message with the sender's private key.
   • CBy encrypting the entire message with the sender's private key.
   • DBy appending the sender's public key to the message.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A web application allows users to log in with a username and password. The application stores a salted hash of the password. When a user logs in, what does the application do to verify the password?

   • ADecrypt the stored hash with the user's public key
   • BReverse the hash to recover the original password and compare
   • CCompare the entered password to the stored hash after encrypting it with AES
   • DHash the entered password with the stored salt and compare to the stored hash
   Reveal Solution Discussion Select an answer first