Cryptography GSEC Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A developer is designing a password storage system for a web application. The team wants to protect passwords even if the database is leaked. Which approach is the most secure?

   • AEncrypt passwords with AES-256 using a key stored in the application config file
   • BStore a salted hash of each password using a slow, memory-hard hash function
   • CStore a plain SHA-256 hash of each password
   • DStore passwords in plaintext for simplicity
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   Two servers in different data centers need to establish a secure channel. They already share a long-term secret. Which protocol is most appropriate for encrypting their ongoing communication?

   • AIPsec with pre-shared key authentication
   • BSSH with password authentication
   • CTLS with client certificates
   • DAES encryption of each packet manually
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which cryptographic attack involves trying every possible key until the correct one is found?

   • ASide-channel attack
   • BMan-in-the-middle attack
   • CBirthday attack
   • DBrute-force attack
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company sends legally binding contracts to clients via email. The legal team wants to ensure that the client can prove the contract was sent by the company and that it was not altered after signing. What should the company do?

   • ASign the contract with the company's private key and send the contract and signature to the client.
   • BHash the contract and include the hash in the email body.
   • CEncrypt the contract with the client's public key before sending.
   • DSend the contract over a TLS-encrypted email connection.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which statement best describes how symmetric encryption works?

   • AIt uses a hash of the key to verify the message.
   • BIt uses a public key to encrypt and a private key to decrypt.
   • CIt uses a different key for each block of data.
   • DIt uses the same key for both encryption and decryption.
   Reveal Solution Discussion Select an answer first