Encryption CT-STE Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   Which protocol is commonly used to encrypt data in transit between a web browser and a server?

   • AIPsec
   • BSSH
   • CHTTPS
   • DTLS
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security tester is reviewing a system that uses hybrid encryption to secure communications between a client and a server. The system generates a random session key, encrypts the session key with the server's public key, and encrypts the data with the session key using AES. What is the primary reason for using this hybrid approach?

   • ATo allow the server to decrypt the data without needing to know the client's public key.
   • BTo ensure that the session key is never transmitted in plaintext, protecting it from eavesdroppers.
   • CTo provide both confidentiality and integrity in a single encryption operation.
   • DTo combine the speed of symmetric encryption for data with the secure key distribution of asymmetric encryption.
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   A security tester is evaluating a cloud storage service that claims to encrypt data at rest. The tester wants to verify that the encryption is actually implemented. What is the most reliable method?

   • AUpload a known plaintext file and then download it to see if it is encrypted.
   • BUse a cloud access security broker (CASB) to inspect the data as it is stored.
   • CAttempt to access the underlying storage infrastructure directly, such as the raw disk blocks.
   • DCheck the service's documentation to confirm that encryption is enabled.
   Reveal Solution Discussion Select an answer first