An organization uses a shared AES key to encrypt data at rest. A security audit recommends reducing the risk if the key is compromised. Which practice is most effective?

Use a shorter key to reduce processing time

Share the key with all employees for backup

Rotate the key regularly and re-encrypt data with the new key

Keep the key in a plaintext file on the server

A software vendor distributes updates and wants users to verify that the updates came from the vendor and were not altered. Users do not have a pre-shared secret with the vendor. Which mechanism should the vendor use?

Hash the update and publish the hash on the vendor's website

Encrypt the update with the vendor's public key

Use a symmetric key shared with all users

Sign the update with the vendor's private key and publish the corresponding public key

GIAC Security Essentials

Domain 3Objective 1

Cryptography GSEC Practice Questions (Page 2)

Part of the Cryptography and Communications domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

7concepts

Questions 6–10

6foundation · easy
What does a digital signature provide in addition to data integrity?
Select an answer first
7foundation · easy
Which cryptographic protocol is commonly used to secure web traffic between a browser and a web server?
Select an answer first
8application · medium
An organization uses a shared AES key to encrypt data at rest. A security audit recommends reducing the risk if the key is compromised. Which practice is most effective?
Select an answer first
9foundation · easy
Which of the following is a common symmetric encryption algorithm?
Select an answer first
10application · medium
A software vendor distributes updates and wants users to verify that the updates came from the vendor and were not altered. Users do not have a pre-shared secret with the vendor. Which mechanism should the vendor use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Cryptography GSEC Practice Questions (Page 2)

Questions 6–10

What does a digital signature provide in addition to data integrity?

Which cryptographic protocol is commonly used to secure web traffic between a browser and a web server?

An organization uses a shared AES key to encrypt data at rest. A security audit recommends reducing the risk if the key is compromised. Which practice is most effective?

Which of the following is a common symmetric encryption algorithm?

A software vendor distributes updates and wants users to verify that the updates came from the vendor and were not altered. Users do not have a pre-shared secret with the vendor. Which mechanism should the vendor use?

Keep studying — Cryptography and Communications