025.2 Information Confidentiality and Secure Communication (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is steganography?

   • AThe practice of hiding a message within another medium, such as an image or audio file
   • BThe practice of hashing data to verify integrity
   • CThe practice of encrypting a message to make it unreadable
   • DThe practice of compressing data to reduce size
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which wireless security protocol is the most recent and provides the strongest security?

   • AWPA
   • BWEP
   • CWPA3
   • DWPA2
   Reveal Solution Discussion Select an answer first
4. 3application · easy

   A system administrator needs to securely transfer a configuration file from a local workstation to a remote Linux server over the internet. The administrator wants to ensure the file is encrypted during transit and that the server is authenticated. Which command should the administrator use?

   • Aftp file.conf user@server:/path/
   • Bhttp://server/file.conf
   • Cscp file.conf user@server:/path/
   • Dtelnet server -f file.conf
   Reveal Solution Discussion Select an answer first
5. 4application · easy

   A remote employee needs to access internal company resources securely from a public Wi-Fi network. The company has a VPN server at the head office. What is the primary security benefit of using the VPN in this scenario?

   • AIt hides the employee's IP address from the company network.
   • BIt speeds up the employee's internet connection.
   • CIt protects the employee's device from malware on the public Wi-Fi.
   • DIt encrypts the traffic between the employee's device and the company network, protecting it from eavesdropping on the public Wi-Fi.
   Reveal Solution Discussion Select an answer first
6. 5foundation · medium

   During a TLS 1.3 handshake between a client and a server, which sequence of steps correctly describes the core process?

   • AThe client sends a ClientHello with supported cipher suites; the server responds with its certificate and a key exchange message; both derive a shared session key; the client sends a Finished message to confirm.
   • BThe client and server exchange pre-shared keys in plaintext, then use them to encrypt the rest of the session without any certificate verification.
   • CThe server sends its public key to the client, the client encrypts a random session key with it, and the server decrypts it; no further messages are exchanged.
   • DThe client and server negotiate a shared secret using Diffie-Hellman, then the server sends its certificate encrypted with that secret to prove its identity.
   Reveal Solution Discussion Select an answer first