3.7 - Understand Methods of Cryptanalytic Attacks CISSP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What physical emissions can a side-channel attack exploit to extract secret information?

   • AError messages returned by the application
   • BThe length of the encryption key
   • CPower consumption, electromagnetic leaks, or acoustic signals
   • DNetwork traffic patterns
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A penetration tester is assessing a web application that performs RSA decryption. The tester notices that the response time varies slightly depending on the input. Which attack could exploit this observation?

   • AFrequency analysis, analyzing the distribution of ciphertexts in the application's traffic
   • BChosen-ciphertext attack, submitting arbitrary ciphertexts to the application
   • CTiming attack, measuring the time taken to decrypt different ciphertexts to infer the private key
   • DPass the hash attack, using captured password hashes to authenticate
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What do implementation attacks target in a cryptographic system?

   • AMathematical weaknesses in the algorithm
   • BThe key management policies of the organization
   • CThe physical security of the data center
   • DFlaws in the implementation, such as side-channel leaks or fault injection, rather than the algorithm itself
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a common method used in fault injection attacks?

   • AElectromagnetic analysis
   • BAcoustic monitoring
   • CTraffic analysis
   • DVoltage glitching
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What statistical property of natural language does frequency analysis exploit to break classical ciphers?

   • AThe equal probability of all letters in the plaintext
   • BThe uneven distribution of letters or symbols in the plaintext language
   • CThe length of the plaintext message
   • DThe presence of spaces and punctuation
   Reveal Solution Discussion Select an answer first