Cryptography CCT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An organization's web server certificate is about to expire. The administrator needs to replace it with a new certificate from the same public CA. What is the correct sequence of steps?

   • AEncrypt the old certificate with the new private key and reinstall it.
   • BGenerate a new key pair, create a CSR, submit it to the CA, install the returned certificate, and update the server configuration.
   • CReuse the existing private key, create a new CSR, and submit it to the CA.
   • DDownload the CA's root certificate and install it on the server.
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A company is designing a system to store passwords. They want to use a hash function that is resistant to brute-force attacks. Which algorithm should they choose?

   • AMD5
   • Bbcrypt
   • CSHA-256
   • DAES-256
   Reveal Solution Discussion Select an answer first
4. 8expert · medium

   A company is choosing an encryption algorithm for a new product. They need strong security and high performance on modern hardware. Which algorithm is the best choice?

   • ADES
   • BRSA-2048
   • C3DES
   • DAES-256
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a common symmetric encryption algorithm?

   • AAES
   • BRSA
   • CSHA-256
   • DECC
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A system uses RSA for digital signatures. An auditor recommends moving to ECC to reduce key size while maintaining equivalent security. Which consideration is most important when implementing this change?

   • AAll systems that verify signatures must support ECC algorithms.
   • BECC is faster for signature generation but slower for verification compared to RSA.
   • CECC requires larger key sizes than RSA for the same security level.
   • DECC keys cannot be used for encryption.
   Reveal Solution Discussion Select an answer first