Encryption CT-STE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common asymmetric encryption algorithm?

   • AAES
   • B3DES
   • CRSA
   • DBlowfish
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   A security tester is evaluating a system that uses symmetric encryption for data at rest. The system uses a single master key to encrypt all data. The tester recommends implementing key rotation. What is the primary challenge with rotating the master key?

   • AThe old key must be securely deleted to prevent it from being recovered.
   • BAll data encrypted with the old key must be re-encrypted with the new key, which can be resource-intensive.
   • CThe master key must be shared with all authorized users, which increases the risk of exposure.
   • DThe new key must be generated using a cryptographically secure random number generator.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In asymmetric encryption, which key is used to encrypt a message that only the intended recipient can decrypt?

   • AThe recipient's public key
   • BThe sender's public key
   • CThe recipient's private key
   • DThe sender's private key
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   A security tester is assessing a network that uses IPsec for VPN connections. The tester finds that the VPN uses IKEv1 with pre-shared keys (PSK) and does not use Perfect Forward Secrecy (PFS). What is the most significant risk?

   • AThe use of PSK is less secure than certificate-based authentication.
   • BThe lack of PFS means that if the long-term private key is compromised, all past session keys can be decrypted.
   • CIKEv1 is deprecated and should be replaced with IKEv2.
   • DThe PSK could be brute-forced if it is weak, allowing an attacker to impersonate a legitimate user.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security tester is reviewing a system that uses hybrid encryption for secure file transfer. The system encrypts the file with a random symmetric key and then encrypts that key with the recipient's public key. What is the main advantage of this approach over using only asymmetric encryption?

   • AIt eliminates the need for key management because the symmetric key is generated randomly.
   • BIt is faster because symmetric encryption is more efficient for large amounts of data.
   • CIt provides stronger encryption because it uses two different algorithms.
   • DIt provides both confidentiality and integrity in a single operation.
   Reveal Solution Discussion Select an answer first