Foundations of Cryptography and Digital Trust GISF Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   Your company's web application uses a certificate issued by an internal CA. A new employee reports that the browser shows a certificate error. The certificate is not expired and the domain name matches. What is the most likely cause?

   • AThe employee's browser does not trust the internal CA's root certificate.
   • BThe certificate is not signed by a public CA.
   • CThe certificate's private key was compromised.
   • DThe certificate was encrypted with the wrong key.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A user receives a certificate warning in the browser when visiting an internal website. The certificate is issued by the company's internal CA, but the browser does not trust it. What is the most likely cause?

   • AThe certificate is self-signed.
   • BThe certificate has expired.
   • CThe website's domain name is incorrect.
   • DThe internal CA's root certificate is not installed in the browser's trust store.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does a digital signature provide non-repudiation?

   • AIt timestamps the message with a trusted third party.
   • BIt encrypts the entire message with the sender's private key.
   • CIt uses the sender's private key to create a signature that only the sender's public key can verify.
   • DIt uses a shared secret key to create a message authentication code.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company uses symmetric encryption to protect data at rest. The security team wants to reduce the risk of a single key compromise exposing all data. Which practice is most effective?

   • AUse a longer key length for the single key.
   • BStore the key in the same directory as the encrypted data for easy access.
   • CUse a unique key for each data set and store them in a hardware security module (HSM).
   • DUse the same key for all data but change it every year.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company needs to encrypt large volumes of data stored on a file server. The data is accessed by multiple authorized users. The security team wants to minimize the performance impact of encryption and simplify key management. Which approach is most appropriate?

   • AUse a symmetric algorithm and store the key in a plaintext configuration file.
   • BUse a symmetric encryption algorithm with a single shared key stored in a hardware security module (HSM).
   • CUse asymmetric encryption with each user's public key to encrypt the data.
   • DUse a hash function to encrypt the data.
   Reveal Solution Discussion Select an answer first