Encryption CCISO Practice Questions (Page 11)

Questions 51–54

1. 51foundation · easy

   Which type of cryptographic attack involves trying every possible key until the correct one is found?

   • AMan-in-the-middle attack
   • BSide-channel attack
   • CReplay attack
   • DBrute-force attack
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   What is a primary challenge of using symmetric encryption in a large organization?

   • AIt requires the secure distribution and management of many shared keys.
   • BIt cannot be used for encrypting data at rest.
   • CIt does not provide confidentiality.
   • DIt is computationally too slow for most applications.
   Reveal Solution Discussion Select an answer first
4. 53application · medium

   A regional bank stores customer transaction data in an on-premises database. The CISO mandates that all data at rest be encrypted with AES-256. The database team proposes using a single master key stored in the application server's configuration file for simplicity. The CISO rejects this. Which key management practice should the CISO require instead?

   • AEmbed the master key in the database connection string so it is automatically available to all application instances.
   • BEncrypt the master key with a passphrase known only to the database administrator and store it in the database itself.
   • CUse the same master key for all databases and change it only when a compliance audit requires it.
   • DStore the master key in a hardware security module (HSM) and use it to wrap data encryption keys that are rotated periodically.
   Reveal Solution Discussion Select an answer first
5. 54foundation · easy

   What is the primary role of a cryptographic key in an encryption algorithm?

   • ATo compress the plaintext to a smaller size
   • BTo authenticate the sender's identity
   • CTo generate a digital signature
   • DTo control the transformation between plaintext and ciphertext
   Reveal Solution Discussion Select an answer first