Encryption CCISO Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A software company publishes a SHA-256 hash of its installer on its website. A user downloads the installer and computes its SHA-256 hash, but it does not match the published hash. What does this indicate?

   • AThe user's computer has a virus that is encrypting files.
   • BThe hash algorithm is broken and should not be used.
   • CThe installer has been modified or corrupted during download.
   • DThe website's TLS certificate is invalid.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's web application uses TLS certificates issued by an internal CA. Recently, a security audit found that the CA's private key was exposed. The CISO must decide the immediate remediation step to protect users. What should be done first?

   • ARevoke all certificates issued by the compromised CA and reissue them from a new CA with a new key pair.
   • BDisable TLS and use plain HTTP until a new CA is established.
   • CKeep the existing certificates but update the CRL to include only the CA certificate itself.
   • DChange the CA's private key but keep the same CA certificate and continue issuing new certificates.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following best describes symmetric encryption?

   • AIt uses a different key for each block of data.
   • BIt uses the same key for both encryption and decryption.
   • CIt uses a public key for encryption and a private key for decryption.
   • DIt uses a hash of the key to encrypt data.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a best practice for the secure storage of cryptographic keys?

   • AUsing a hardware security module (HSM)
   • BSharing keys via email to all team members
   • CStoring keys in plaintext in the application code
   • DKeeping the same key for the lifetime of the system
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is designing a secure messaging system for internal communications. The system must support end-to-end encryption, allow multiple recipients to read the same message, and minimize the number of keys each user must manage. Which cryptographic approach should the company choose?

   • AUse a hash of the message as the encryption key.
   • BUse a hybrid scheme: generate a random symmetric key for each message, encrypt the message with it, and encrypt the symmetric key with each recipient's public key.
   • CUse RSA to encrypt the entire message for each recipient separately.
   • DUse a single shared symmetric key for all users and distribute it securely.
   Reveal Solution Discussion Select an answer first