Hashing, Digital Signatures, and Digital Certificates CASENET Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What does a mismatch between the computed hash of a received message and the expected hash indicate?

   • AThe message is authentic and unchanged.
   • BThe hash algorithm is not secure.
   • CThe message was encrypted with a different key.
   • DThe message has been altered or corrupted during transmission.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A .NET client application connects to a bank's web service over TLS. The client needs to confirm that the server's certificate is issued by a trusted authority and that the certificate is still valid. Which validation steps should the client perform?

   • AVerify the certificate's signature using the server's private key.
   • BEnsure the certificate is self-signed and matches the server's IP address.
   • CVerify the certificate chain to a trusted root, check the expiration date, and check revocation status.
   • DCheck the certificate's subject name and expiration date only.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   In .NET, which class is used to compute a SHA-256 hash of a byte array?

   • AHashAlgorithm
   • BCryptoStream
   • CSHA256Managed
   • DSHA256
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A .NET client application connects to a third-party web service over TLS. The service's certificate was issued by an intermediate CA that is cross-signed by a root CA. The client's trust store contains the root CA certificate but not the intermediate CA certificate. The TLS handshake fails with a certificate chain error. What is the most likely cause and the appropriate fix?

   • AThe client must disable certificate revocation checking because the intermediate CA is not in the trust store.
   • BThe server is not sending the intermediate certificate; the client cannot build the chain to the trusted root. The server should be configured to send the full chain including the intermediate.
   • CThe root CA certificate in the client's trust store has expired; the client must download and install the new root certificate.
   • DThe certificate's subject name does not match the server's hostname; the client rejects the certificate due to hostname mismatch.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which of the following is a key difference between SHA-2 and SHA-3?

   • ASHA-3 is faster than SHA-2 in all implementations.
   • BSHA-2 is based on the Merkle–Damgård construction, while SHA-3 is based on a sponge construction.
   • CSHA-2 produces longer hash outputs than SHA-3.
   • DSHA-2 uses a sponge construction, while SHA-3 uses a Merkle–Damgård construction.
   Reveal Solution Discussion Select an answer first