Cryptography Concepts for Managers GSLC Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A security manager discovers that a malicious actor has been intercepting encrypted communications and has collected a large amount of ciphertext. The actor is now using a technique that exploits the fact that two different inputs can produce the same hash output. Which attack is the actor attempting?

   • ABirthday attack
   • BBrute-force attack
   • CSide-channel attack
   • DReplay attack
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   How does a hash function provide data integrity?

   • AIt uses a private key to sign the data, proving the sender's identity
   • BIt encrypts the data so that only authorized parties can read it
   • CIt ensures the data is available only to authorized users
   • DIt produces a fixed-size output that changes if the input data changes
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A financial institution must comply with a regulation that requires customer data to be encrypted both at rest and in transit. The compliance team asks the security manager to provide evidence of encryption controls. What is the most appropriate response?

   • AProvide the encryption keys to the auditor for verification.
   • BState that all data is encrypted and no further details are needed.
   • CExplain that encryption is the only control required by the regulation.
   • DProvide a data flow diagram showing where encryption is applied and the algorithms used.
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A security analyst notices that an attacker has been capturing encrypted network traffic for months and is now using a large amount of computing power to try to guess the encryption key. Which type of attack is this?

   • AMan-in-the-middle attack
   • BReplay attack
   • CBrute-force attack
   • DBirthday attack
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Which regulatory requirement is directly supported by using digital signatures to ensure the authenticity and integrity of electronic records?

   • ARequirements for data portability
   • BRequirements for maintaining accurate and complete records
   • CData minimization requirements
   • DRequirements for secure storage of personal data
   Reveal Solution Discussion Select an answer first