Cryptography CCT Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security architect must design a system to encrypt large files (up to 10 GB) for storage in the cloud. The system must allow multiple users to encrypt files for a single recipient without sharing a secret key. Performance is critical. Which approach best meets these requirements?

   • AUse RSA to encrypt each file directly with the recipient's public key.
   • BUse ECC to encrypt the file directly with the recipient's public key.
   • CUse a shared symmetric key stored in a key management service and encrypt all files with that key.
   • DGenerate a random symmetric key for each file, encrypt the file with AES, and encrypt the symmetric key with the recipient's RSA public key.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   A security analyst needs to ensure that data stored on a backup drive has not been modified by an unauthorized party. Which cryptographic goal is the analyst primarily trying to achieve?

   • ANon-repudiation
   • BAuthentication
   • CIntegrity
   • DConfidentiality
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A legal team needs to ensure that a digitally signed contract cannot be repudiated by the sender. What must be in place for non-repudiation to be effective?

   • AThe contract is hashed and the hash is stored in a public database.
   • BThe sender's private key is kept secret and the public key is certified by a trusted CA.
   • CThe contract is encrypted with the recipient's public key.
   • DThe sender's public key is kept secret.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A security team notices that a server's TLS connections are unusually slow and the CPU usage is high. An attacker is suspected of causing the server to perform expensive cryptographic operations repeatedly. Which type of attack is most likely occurring?

   • ASide-channel attack
   • BDowngrade attack
   • CKnown-plaintext attack
   • DDenial-of-service via cryptographic CPU exhaustion
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   In a digital signature process, what is encrypted with the signer's private key?

   • AThe entire original message
   • BThe recipient's public key
   • CA symmetric session key
   • DThe hash of the message
   Reveal Solution Discussion Select an answer first