Password Protection and Encryption Techniques DFE Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is a primary legal and ethical consideration when attempting to bypass password protection on a suspect's device during a forensic investigation?

   • AThe examiner can bypass any password as long as the investigation is for a criminal case
   • BThe examiner should avoid documenting the bypass process to protect the investigation
   • CThe examiner must have proper legal authority, such as a warrant or consent, to access the device
   • DThe examiner should always use the most aggressive cracking technique to save time
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A forensic examiner has a password-protected ZIP file that is suspected to contain evidence. The examiner knows the password is a six-digit PIN. Which cracking method is most efficient?

   • AUse a brute-force attack that tries all six-digit numeric combinations.
   • BUse a rainbow table for the ZIP file's hash.
   • CUse a dictionary attack with a wordlist of common words.
   • DUse a rule-based attack that appends digits to dictionary words.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A security team is designing a system where a server must authenticate clients without storing plaintext passwords. They also need to ensure that even if the authentication database is leaked, passwords cannot be easily reversed. Which combination of techniques should they use?

   • AStore passwords encrypted with AES using a hardcoded key in the application.
   • BStore passwords in plaintext but restrict database access to administrators only.
   • CStore salted hashes of passwords and use a slow key derivation function.
   • DUse a simple hash like MD5 without salt for fast authentication.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A forensic investigator is analyzing a communication system that uses a hybrid encryption scheme: a symmetric session key encrypts the data, and the session key is encrypted with the recipient's public key. Which statement best describes the role of the symmetric algorithm in this scheme?

   • AIt encrypts the bulk data efficiently, while the asymmetric algorithm protects the session key.
   • BIt encrypts the recipient's public key to prevent interception.
   • CIt provides a digital signature to verify the sender's identity.
   • DIt is used only for key exchange and not for data encryption.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A company needs to securely exchange encrypted emails with external partners. They require that only the intended recipient can decrypt the message, and they want to avoid sharing a common secret key. Which encryption approach should they use?

   • AUse symmetric encryption with a shared key distributed to all partners.
   • BUse a hash function to create a digital fingerprint of the message.
   • CUse a stream cipher with a fixed key that is published in the company directory.
   • DUse asymmetric encryption, encrypting the message with the recipient's public key.
   Reveal Solution Discussion Select an answer first