Cryptography CCT Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A software vendor distributes a signed update file. A customer verifies the signature using the vendor's public key and the signature is valid. Which security property is guaranteed by this verification?

   • AThe file is free from malware.
   • BThe vendor's private key has not been compromised.
   • CThe vendor's certificate is currently valid.
   • DThe file has not been modified since it was signed.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   An organization is required to destroy cryptographic keys at the end of their lifecycle. Which method is considered secure for key destruction?

   • AOverwrite the key storage area with random data multiple times.
   • BDelete the key file from the filesystem.
   • CEncrypt the key with another key and store it.
   • DRename the key file and move it to a different directory.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A security administrator is troubleshooting why a client cannot verify the digital signature of a server's certificate. The certificate is issued by an intermediate CA. What is the most likely cause?

   • AThe certificate is encrypted with the wrong algorithm.
   • BThe client's clock is set to the correct time.
   • CThe server's private key is not stored in the HSM.
   • DThe client does not trust the root CA that issued the intermediate CA's certificate.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   In a Public Key Infrastructure (PKI), what is the role of a Certificate Authority (CA)?

   • ATo generate and issue digital certificates that bind public keys to identities
   • BTo authenticate users with passwords
   • CTo store users' private keys securely
   • DTo encrypt all network traffic between clients and servers
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which type of cryptographic attack exploits the physical implementation of a cryptosystem, such as timing or power consumption?

   • ABrute force attack
   • BSide-channel attack
   • CKnown-plaintext attack
   • DMan-in-the-middle attack
   Reveal Solution Discussion Select an answer first