How does a fault injection attack compromise a cryptographic device?

By intercepting the ciphertext and using frequency analysis

By analyzing the power consumption during encryption

By measuring the time taken to perform encryption

By inducing faults such as voltage glitches or clock skew to produce erroneous outputs that reveal key material

What does a known-plaintext attack require in addition to intercepted ciphertext?

The ability to choose ciphertexts and obtain their decryptions

The ability to choose plaintexts and obtain their ciphertexts

At least one known plaintext-ciphertext pair

What is the primary action a ransomware attack takes on a victim's data?

Deletes the victim's data permanently

Encrypts the victim's data and demands payment for decryption

Modifies the victim's data to corrupt it

Copies the victim's data to an external server

A security architect is designing a secure communication channel between two servers. The architect is concerned about an attacker who can intercept and modify messages in transit. Which control is most effective to prevent this attack?

Use a firewall to block unauthorized access to the servers

Use a VPN to encrypt all traffic between the servers

Use mutual authentication with digital certificates to ensure both parties are legitimate

Use strong encryption to protect the confidentiality of the messages

Certified Information Systems Security Professional

Domain 3Objective 7

3.7 - Understand Methods of Cryptanalytic Attacks CISSP Practice Questions (Page 6)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

13concepts

13%of the exam

Questions 26–30

26foundation · easy
How does a fault injection attack compromise a cryptographic device?
Select an answer first
27foundation · easy
What does a known-plaintext attack require in addition to intercepted ciphertext?
Select an answer first
28foundation · easy
What is the primary action a ransomware attack takes on a victim's data?
Select an answer first
29expert · hard
A security architect is designing a secure communication channel between two servers. The architect is concerned about an attacker who can intercept and modify messages in transit. Which control is most effective to prevent this attack?
Select an answer first
30foundation · easy
Which type of cipher is most vulnerable to frequency analysis?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.