Data Encryption Techniques NDE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common mode of operation for a block cipher?

   • ACBC
   • BRSA
   • CDiffie-Hellman
   • DSHA-256
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security engineer is designing a secure file-transfer service for a logistics company. The service must handle large files efficiently while ensuring that only the intended recipient can decrypt them. The engineer decides to encrypt each file with a unique symmetric key and then encrypt that key with the recipient's public key. Which two cryptographic concepts is the engineer combining?

   • ASymmetric encryption for bulk data and asymmetric encryption for key exchange
   • BHash-based encryption for integrity and digital signature for authenticity
   • CStream cipher for the file and block cipher for the key
   • DAsymmetric encryption for the file and symmetric encryption for the key
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A multinational company needs to encrypt data in transit between its data centers in different countries. The company must comply with data residency laws that require encryption keys to be stored within the country where the data resides. The company uses a centralized key management system (KMS) in one country. Which approach best meets the compliance requirement?

   • AUse the centralized KMS and rely on the cloud provider's compliance certifications
   • BUse the centralized KMS but encrypt the keys with a master key stored in each country
   • CUse a single KMS in a country that has a data protection agreement with all other countries
   • DDeploy a KMS instance in each country and store keys locally
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A small company uses a single symmetric key to encrypt all files on its file server. The key is stored in a plaintext file on the same server. The administrator wants to improve key management without changing the encryption algorithm. Which action should the administrator take first?

   • AStore the key in a hardware security module (HSM) and enforce access controls
   • BSwitch to asymmetric encryption and use the private key for encryption
   • CRotate the key every 30 days but keep it in the same plaintext file
   • DEncrypt the key with a password and store it in the same directory
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In asymmetric encryption, what is the relationship between the public key and the private key?

   • AThe private key is derived from the public key each time it is used.
   • BBoth keys are kept secret by the owner.
   • CThey are identical keys used interchangeably.
   • DThe public key encrypts and the private key decrypts.
   Reveal Solution Discussion Select an answer first