022.1 Cryptography and Public Key Infrastructure (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A software vendor distributes a signed update package. The vendor publishes the SHA-256 digest of the package and signs that digest with their private key. A system administrator downloads the package and wants to verify both its origin and that it has not been modified in transit. Which two-step process should the administrator perform?

   • AUse the vendor's private key to decrypt the signature, then compare the result to the file's hash published on the vendor's website.
   • BEncrypt the downloaded file with the vendor's public key, then send it back to the vendor to confirm the hash matches.
   • CDecrypt the signature with the vendor's public key, then compare the resulting digest to a locally computed SHA-256 of the downloaded file.
   • DHash the signature with SHA-256 and compare the result to the vendor's published digest of the file.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's security policy requires that encryption keys be stored separately from the encrypted data they protect. The company is deploying a new application that encrypts sensitive customer records in a database. Which storage solution for the encryption key best meets this requirement?

   • AA dedicated Hardware Security Module (HSM) or a separate key management server.
   • BA configuration file on the same application server that hosts the database.
   • CThe same database table as the encrypted data, in a column labeled 'key'.
   • DAn email sent to the system administrator for safekeeping.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which core principle of cryptography ensures that data has not been altered during transmission?

   • ANon-repudiation
   • BAuthentication
   • CIntegrity
   • DConfidentiality
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How does a digital signature provide integrity?

   • ABy adding a timestamp to the message
   • BBy including a hash of the message that is encrypted with the sender's private key
   • CBy using a shared secret to create a message authentication code
   • DBy encrypting the entire message with the sender's private key
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which trust model relies on individuals signing each other's keys to establish trust?

   • AHierarchical trust model
   • BCross-certification
   • CDirect trust model
   • DWeb of trust
   Reveal Solution Discussion Select an answer first