Network Data Encryption GMON Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Under GDPR, what is the role of encryption in protecting personal data?

   • AEncryption is not required if the data is pseudonymized.
   • BEncryption is mandatory for all personal data stored or transmitted.
   • CEncryption is one of the appropriate technical measures that can be used to ensure the security of personal data.
   • DEncryption is only required for data transmitted outside the EU.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is a primary performance consideration when decrypting encrypted traffic for monitoring?

   • ADecryption increases the size of the packets, consuming more bandwidth.
   • BDecryption requires significant CPU resources, which can introduce latency.
   • CDecryption requires additional storage for the decrypted data.
   • DDecryption is only possible if the monitoring device has a dedicated GPU.
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which encryption algorithm is a symmetric block cipher commonly used for encrypting data in transit?

   • ARSA (Rivest-Shamir-Adleman)
   • BAES (Advanced Encryption Standard)
   • CSHA-256 (Secure Hash Algorithm 256)
   • DDiffie-Hellman
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A security analyst is troubleshooting an internal web application that suddenly fails to load for users. The application uses TLS 1.2. The analyst captures traffic on the server and sees a ClientHello with a list of cipher suites, followed by a server alert 'handshake_failure'. The server's configuration only supports TLS 1.2 with ECDHE-RSA-AES128-GCM-SHA256. Which action is most likely to resolve the issue?

   • AEnable TLS 1.3 on the server so it can negotiate a modern cipher suite.
   • BDisable certificate validation on the client to bypass the handshake failure.
   • CAdd a cipher suite that the client supports, such as AES128-SHA, to the server's configuration.
   • DRestart the server to clear the cached TLS session that is causing the failure.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   In a typical TLS handshake, how are symmetric and asymmetric encryption used together?

   • ASymmetric encryption is used to exchange the public key, and asymmetric encryption encrypts the session.
   • BAsymmetric encryption is used to securely exchange a symmetric session key, which then encrypts the bulk of the communication.
   • CBoth symmetric and asymmetric encryption are used to encrypt every packet, doubling the security.
   • DSymmetric encryption is used to authenticate the server, and asymmetric encryption encrypts all data.
   Reveal Solution Discussion Select an answer first