Encryption at Rest and in Transit CSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is an example of a cloud provider key management service?

   • AAmazon S3
   • BGoogle Cloud Storage
   • CMicrosoft Active Directory
   • DAWS Key Management Service (KMS)
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company uses a cloud KMS to manage keys for envelope encryption. They want to reduce the risk of a compromised KMS administrator being able to decrypt all data. Which control should they implement?

   • AUse a single key for all data and rotate it daily
   • BStore all keys in the KMS and give all administrators full access
   • CDisable key rotation to maintain stability
   • DUse separation of duties by requiring multiple approvals for key usage and rotation
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A retail company's web application allows customers to submit orders over the internet. The security team wants to ensure that all data transmitted between the customer's browser and the application is encrypted and that the server's identity is authenticated. Which technology should they implement?

   • ASSH tunneling from the browser to the server
   • BApplication-level encryption using a shared secret in the HTTP header
   • CTLS with a certificate issued by a trusted public CA
   • DIPsec VPN between the customer and the application
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why is encryption important for communication between cloud services?

   • ATo reduce the amount of data transmitted
   • BTo prevent unauthorized parties from reading data exchanged between services
   • CTo speed up the communication
   • DTo eliminate the need for authentication
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company needs to securely exchange encryption keys with a partner over the internet. They want to use a method that allows the partner to encrypt a message that only the company can decrypt, without sharing a secret key beforehand. Which approach should they use?

   • ASymmetric encryption: share a secret key over email and use it to encrypt the message.
   • BUse a hash of the message to verify integrity and send the message in plaintext.
   • CAsymmetric encryption: the partner encrypts the message with the company's public key, and the company decrypts it with its private key.
   • DUse a digital signature to encrypt the message.
   Reveal Solution Discussion Select an answer first