Cryptography Concepts for Managers GSLC Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which component of a PKI is responsible for verifying the identity of an entity before a certificate is issued?

   • AThe certificate revocation list (CRL)
   • BThe key escrow agent
   • CThe registration authority (RA)
   • DThe certificate store
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security manager is reviewing the organization's cryptographic controls and discovers that a legacy system uses a weak encryption algorithm. The system is critical and cannot be taken offline easily. What should the manager do first?

   • AImmediately disconnect the system from the network.
   • BIgnore the issue because the system is legacy.
   • CPerform a risk assessment to determine the exposure and prioritize remediation.
   • DReplace the algorithm with a stronger one without testing.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which cryptographic attack involves an attacker intercepting and altering communications between two parties without their knowledge?

   • AReplay attack
   • BMan-in-the-middle attack
   • CBrute-force attack
   • DBirthday attack
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company's encryption keys are managed by a third-party cloud KMS. The security manager is concerned about the risk of the KMS provider suffering a data breach that exposes keys. What is the best way to mitigate this risk?

   • AStore a copy of all keys on the company's own servers.
   • BUse a single key for all data to simplify management.
   • CTrust the provider's security certifications and take no additional action.
   • DUse a bring-your-own-key (BYOK) model where the company generates and controls the root keys.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security manager must decide between using a hardware security module (HSM) or a software-based key management system for storing the organization's encryption keys. The organization has a high volume of cryptographic operations and requires low latency. The budget is limited. Which factor is most important in this decision?

   • ASoftware-based systems are always faster and should be chosen for performance.
   • BThe HSM is always more secure and should be chosen regardless of cost.
   • CThe HSM provides higher security but may introduce latency, while software-based systems are faster but less secure.
   • DThe choice depends only on the number of keys to be managed.
   Reveal Solution Discussion Select an answer first