Practical Cryptography GXPN Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A developer is implementing a file integrity monitoring system. The system needs to detect any modification to files, including accidental changes and malicious tampering. Which approach is most appropriate?

   • AStore the file size and modification timestamp.
   • BEncrypt each file with AES and store the encryption key securely.
   • CStore a SHA-256 hash of each file and periodically recompute and compare.
   • DUse a cyclic redundancy check (CRC) for each file.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A penetration tester is writing a Python script to demonstrate how a client can verify a server's identity during TLS handshake. The script needs to validate the server's certificate chain and confirm the server possesses the corresponding private key. Which steps should the script perform?

   • AVerify the certificate signature using the CA's public key and then perform a key exchange that proves possession of the private key.
   • BDecrypt the server's certificate with the server's public key.
   • CCheck that the certificate is not expired and skip signature verification.
   • DUse the server's private key to encrypt a challenge and send it to the server.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In asymmetric cryptography, what is the relationship between the public key and the private key?

   • AThey are mathematically related, but the private key cannot be feasibly derived from the public key.
   • BThe public key is encrypted with the private key to ensure confidentiality.
   • CThey are identical and interchangeable.
   • DThe private key is derived from the public key using a hash function.
   Reveal Solution Discussion Select an answer first
5. 19application · easy

   A company wants to implement a secure email system where emails are encrypted so only the intended recipient can read them. Which key should be used to encrypt the email?

   • AThe recipient's public key
   • BThe sender's private key
   • CThe recipient's private key
   • DThe sender's public key
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a common use of the 'hashlib' module in Python?

   • APerforming RSA encryption
   • BComputing message digests using algorithms like SHA-256
   • CGenerating random numbers for key generation
   • DEstablishing TLS connections
   Reveal Solution Discussion Select an answer first