Cryptographic Attacks and Defensive Coding CASEJAVA Practice Questions (Page 9)

Questions 41–43

1. 41foundation · easy

   Which of the following is an example of validating input before using it in a cryptographic operation?

   • AChecking that a decryption key is exactly the expected length before using it
   • BEncrypting the input twice to ensure security
   • CUsing the input as a seed for a random number generator
   • DConverting the input to a string before encryption
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A Java developer is implementing a digital signature scheme. Which combination of algorithm and key size is currently considered secure?

   • ADSA with 1024-bit keys and SHA-1
   • BRSA with 2048-bit keys and SHA-256
   • CECDSA with a 160-bit curve and SHA-1
   • DRSA with 1024-bit keys and MD5
   Reveal Solution Discussion Select an answer first
3. 43expert · hard

   A Java development team is integrating a third-party cryptographic library. The library is open-source but has not been updated in two years. The team's security policy requires using established libraries. What should the team do?

   • AConduct a security review of the library, check for known vulnerabilities, and consider a maintained fork or alternative.
   • BUse the library only for non-critical data to reduce risk.
   • CWrite a custom wrapper around the library to fix any issues.
   • DUse the library as-is because it is open-source and widely used.
   Reveal Solution Discussion Select an answer first