Symmetric and Asymmetric Encryption CASEJAVA Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A Java application must encrypt data for storage in a multi-tenant database. Each tenant's data must be encrypted with a different key. The security team wants to minimize the performance impact of encryption. Which approach is most appropriate?

   • AUse RSA-2048 to encrypt each tenant's data.
   • BUse a single AES-256 key for all tenants.
   • CUse a unique AES-256 key for each tenant, managed by a KMS.
   • DUse ECC to encrypt each tenant's data.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A Java application must encrypt data at rest and also allow multiple external partners to decrypt specific portions of the data. The data is large, and the partners do not share a common secret. The security team wants to minimize the number of keys to manage. Which approach is most appropriate?

   • AEncrypt the data separately with each partner's public key.
   • BEncrypt the data with a symmetric key, then encrypt that key with each partner's public key.
   • CUse ECC to encrypt the data with a shared public key.
   • DUse a single symmetric key shared with all partners.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A Java application must support both encryption and digital signatures. The team is considering using the same RSA key pair for both operations. What is the primary security concern with this approach?

   • ASigning with the private key would expose the private key.
   • BRSA cannot be used for both encryption and signing.
   • CUsing the same key for encryption and signing can lead to cross-protocol attacks and complicates key management.
   • DThe key would be too large to use for both operations.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In asymmetric encryption, which key is used to encrypt a message that only the intended recipient can decrypt?

   • AThe recipient's public key
   • BThe sender's public key
   • CThe recipient's private key
   • DThe sender's private key
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is asymmetric encryption often used to exchange a symmetric key rather than encrypting the entire message?

   • AAsymmetric encryption is computationally expensive, so it is used only for small data like keys.
   • BAsymmetric encryption is not secure for large messages.
   • CAsymmetric encryption is faster than symmetric encryption for large data.
   • DAsymmetric encryption provides better confidentiality for the data.
   Reveal Solution Discussion Select an answer first