What is the key difference between hashing and encryption?

Hashing uses keys, while encryption does not

Encryption is reversible with a key, while hashing is a one-way function

Hashing is reversible, while encryption is not

Encryption produces a fixed-size output, while hashing produces variable-size output

What is a common mitigation against downgrade attacks in TLS?

Disabling older, insecure protocol versions on the server

Implementing a web application firewall

Encrypting data at rest with AES-256

Using longer passwords for user accounts

A government agency issues digital certificates to citizens. A citizen needs to prove that a document they submitted was created by them and not altered. Which process should the citizen use?

Hash the document and include the hash in the document itself.

Sign the document with the citizen's private key and send the document and signature to the agency.

Encrypt the document with the agency's public key.

Send the document over a TLS connection to the agency's website.

GIAC Certified Web Application Defender

Domain 5Objective 2

Encryption and Protecting Sensitive Data GWEB Practice Questions (Page 6)

Part of the Security Testing and Cryptography domain, which makes up ~20% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 5–8 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

10concepts

Questions 26–30

26foundation · easy
What is the key difference between hashing and encryption?
Select an answer first
27foundation · easy
Which of the following is a common asymmetric encryption algorithm?
Select an answer first
28foundation · easy
Which regulation specifically requires the protection of cardholder data through encryption and other controls?
Select an answer first
29foundation · easy
What is a common mitigation against downgrade attacks in TLS?
Select an answer first
30application · medium
A government agency issues digital certificates to citizens. A citizen needs to prove that a document they submitted was created by them and not altered. Which process should the citizen use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWEB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWEB” is a trademark of its owner, used for identification only.

Encryption and Protecting Sensitive Data GWEB Practice Questions (Page 6)

Questions 26–30

What is the key difference between hashing and encryption?

Which of the following is a common asymmetric encryption algorithm?

Which regulation specifically requires the protection of cardholder data through encryption and other controls?

What is a common mitigation against downgrade attacks in TLS?

A government agency issues digital certificates to citizens. A citizen needs to prove that a document they submitted was created by them and not altered. Which process should the citizen use?

Keep studying — Security Testing and Cryptography