Cryptography and PKI ECSS Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which PKI application is used to secure communication between a web browser and a web server?

   • AIPsec
   • BS/MIME
   • CSSL/TLS
   • DCode signing
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   Two branch offices need to exchange sensitive data over the internet. They want to use a symmetric encryption algorithm for speed, but they are concerned about securely sharing the secret key. Which approach should they use to establish the symmetric key securely?

   • AEmail the symmetric key to the other office in plaintext.
   • BUse the same symmetric key for all communications and never change it.
   • CEncrypt the symmetric key with a hash function before sending it.
   • DUse a key exchange protocol such as Diffie-Hellman to establish a shared symmetric key.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A legal team needs to prove that a contract was signed by a specific executive and that the contract has not been altered since signing. The executive uses a digital signature. Which property of the digital signature directly supports the legal requirement of non-repudiation?

   • AThe signature is stored in a public timestamping service.
   • BThe signature is based on a hash of the contract, ensuring that any change invalidates the signature.
   • CThe signature was created using the executive's private key, which only the executive should possess.
   • DThe signature is verified using the executive's public key, which is publicly available.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   An organization uses a hybrid encryption scheme for secure file transfers: a symmetric key encrypts the file, and the symmetric key is encrypted with the recipient's public key. The security team wants to ensure that if a recipient's private key is compromised, the impact is limited to files sent to that recipient. Which additional practice should be implemented?

   • AEncrypt the symmetric key with the sender's private key instead of the recipient's public key.
   • BUse a unique symmetric key for each file and each recipient.
   • CUse the same symmetric key for all files but change it monthly.
   • DStore the symmetric key in the same location as the encrypted file.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which key management practice involves replacing an existing key with a new one before the old key is compromised?

   • AKey generation
   • BKey distribution
   • CKey rotation
   • DKey destruction
   Reveal Solution Discussion Select an answer first