A security team discovers that an attacker has been intercepting encrypted communications and performing a downgrade attack, forcing the client and server to use a weaker encryption algorithm. The team wants to prevent this attack. Which control is most effective?

Use a VPN to encrypt all traffic.

Implement certificate pinning on the client.

Use a longer key length for the encryption algorithm.

Disable all weak encryption algorithms on the server and configure the server to reject any connection that does not use strong algorithms.

A startup is building a messaging application that must provide end-to-end encryption. The team is deciding between using only symmetric encryption with pre-shared keys or using asymmetric encryption for key exchange. The application must scale to millions of users, and users may join without prior coordination. Which approach is more appropriate, and what is the primary reason?

Asymmetric encryption for key exchange, because it allows users to establish secure communication without prior coordination.

Symmetric encryption with a central key server, because it simplifies key distribution.

Asymmetric encryption for all data, because it is more secure than symmetric encryption.

Symmetric encryption with pre-shared keys, because it is faster and simpler.

A multinational company must comply with data protection regulations that require personal data to be encrypted. The company operates in multiple regions, and some regulations require data to remain within specific geographic boundaries. The security manager must design a solution that satisfies both encryption and data residency requirements. What is the most appropriate approach?

Use encryption keys stored in a centralized key management service, and deploy data storage in regions that meet residency requirements.

Store all data in the company's headquarters region and encrypt it there.

Encrypt all data at the application layer before sending it to any region.

Use a single global encryption key for all regions to simplify management.

GIAC Security Leadership

Domain 4Objective 1

Cryptography Concepts for Managers GSLC Practice Questions (Page 7)

Part of the Cryptography and Privacy domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 4–6 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 31–35

31application · medium
A security analyst notices that an attacker has been capturing encrypted traffic between a web server and clients. The analyst suspects the attacker is trying to build a massive table of possible keys to eventually decrypt the traffic. Which cryptographic attack is the analyst observing?
Select an answer first
32expert · hard
A security team discovers that an attacker has been intercepting encrypted communications and performing a downgrade attack, forcing the client and server to use a weaker encryption algorithm. The team wants to prevent this attack. Which control is most effective?
Select an answer first
33expert · hard
A startup is building a messaging application that must provide end-to-end encryption. The team is deciding between using only symmetric encryption with pre-shared keys or using asymmetric encryption for key exchange. The application must scale to millions of users, and users may join without prior coordination. Which approach is more appropriate, and what is the primary reason?
Select an answer first
34foundation · easy
Which aspect of key management involves securely transferring a cryptographic key from the key generation system to the systems that will use it?
Select an answer first
35expert · hard
A multinational company must comply with data protection regulations that require personal data to be encrypted. The company operates in multiple regions, and some regulations require data to remain within specific geographic boundaries. The security manager must design a solution that satisfies both encryption and data residency requirements. What is the most appropriate approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.

Cryptography Concepts for Managers GSLC Practice Questions (Page 7)

Questions 31–35

A security analyst notices that an attacker has been capturing encrypted traffic between a web server and clients. The analyst suspects the attacker is trying to build a massive table of possible keys to eventually decrypt the traffic. Which cryptographic attack is the analyst observing?

A security team discovers that an attacker has been intercepting encrypted communications and performing a downgrade attack, forcing the client and server to use a weaker encryption algorithm. The team wants to prevent this attack. Which control is most effective?

Which aspect of key management involves securely transferring a cryptographic key from the key generation system to the systems that will use it?

Keep studying — Cryptography and Privacy