Cryptography CCT Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A system administrator needs to store user passwords securely. The current system stores passwords in plain text. Which approach is the most secure for password storage?

   • AUse a strong password hashing algorithm like bcrypt with a unique salt per user.
   • BStore the SHA-256 hash of the password without a salt.
   • CEncrypt the passwords with AES-256 and store the encryption key on the same server.
   • DStore the password in a database with restricted access.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company wants to ensure that only authorized users can read a sensitive document, and that any modification to the document is detected. Which combination of cryptographic controls should be used?

   • ASign the document with a digital signature.
   • BOnly encrypt the document with a symmetric key.
   • CEncrypt the document with a symmetric key and also compute a hash of the document.
   • DOnly compute a hash of the document.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A legal department needs to ensure that a contract sent electronically cannot be repudiated by the sender. Which cryptographic mechanism should be used?

   • AHash function
   • BSymmetric encryption
   • CKey exchange protocol
   • DDigital signature
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company's internal web application uses client certificates issued by a private CA. An employee's certificate expires, and the employee cannot log in. The certificate was issued for two years. What is the most appropriate action for the administrator?

   • AExtend the expiration date on the existing certificate by modifying the CA database.
   • BRenew the certificate with a new key pair and re-enroll the certificate on the employee's device.
   • CReuse the same key pair and reissue the certificate with the same expiration date.
   • DIssue a new certificate with a longer validity period, such as five years, to reduce future expirations.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company uses a key management system (KMS) to store encryption keys. An auditor requires that keys be destroyed securely when they are no longer needed. Which practice best meets this requirement?

   • ADelete the keys from the KMS and overwrite the storage media.
   • BArchive the keys in a secure backup for future use.
   • CEncrypt the keys with a new key and store them elsewhere.
   • DMark the keys as inactive but retain them in the KMS.
   Reveal Solution Discussion Select an answer first