5.1 - Understand Reasons and Requirements for Cryptography SSCP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of Personally Identifiable Information (PII) that requires cryptographic protection?

   • AA patient's medical diagnosis
   • BA company's trade secret formula
   • CA customer's social security number
   • DA company's internal network diagram
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the fundamental principle behind Quantum Key Distribution (QKD)?

   • AIt uses extremely long keys to prevent brute-force attacks
   • BIt relies on a trusted third party to distribute keys securely
   • CIt leverages the property that measuring a quantum state disturbs it, revealing eavesdropping
   • DIt uses mathematical complexity to make keys unbreakable
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A financial institution is implementing cryptographic controls to meet industry standards. They need to ensure that their encryption practices align with recognized best practices and are auditable. Which approach best meets this need?

   • ARelying on the encryption provided by the operating system without configuration
   • BImplementing proprietary encryption algorithms developed in-house
   • CFollowing ISO/IEC 27001 and using FIPS-validated cryptographic modules
   • DUsing a single encryption algorithm for all data types without review
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of a digital signature?

   • ATo compress the message to reduce transmission size
   • BTo provide a way to verify the sender's identity and ensure the message was not altered
   • CTo encrypt the entire message so that only the intended recipient can read it
   • DTo generate a random key for symmetric encryption
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security architect is evaluating quantum key distribution (QKD) for a high-security network. The network spans a long distance, and the team is concerned about the limitations of QKD. Which factor is a significant limitation of QKD that must be addressed?

   • AQKD does not provide forward secrecy
   • BQKD requires a dedicated fiber-optic link and is limited by distance
   • CQKD is computationally intensive and slow
   • DQKD is vulnerable to classical man-in-the-middle attacks
   Reveal Solution Discussion Select an answer first