3.5 Identify and Describe Quantum Security Risks (e.g., Harvest Now, Decrypt Later Attacks) and Palo Alto Networks Platform Capabilities to Address Them (e.g., Post-Quantum Readiness, Hybrid Cryptography) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 5)

Questions 21–25

1. 21foundation · medium

   What is post-quantum cryptography?

   • ACryptographic algorithms designed to be secure against both classical and quantum computers.
   • BCryptography that is only used after a quantum computer is built.
   • CCryptography that uses quantum entanglement to encrypt data.
   • DCryptography that uses quantum key distribution (QKD) to secure communications.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A healthcare organization is using Palo Alto Networks firewalls to protect patient data. The security team wants to ensure that their VPN connections are protected against future quantum attacks while maintaining compatibility with existing infrastructure. What is the most appropriate Palo Alto Networks capability to enable?

   • AQuantum key distribution, which uses quantum mechanics to securely distribute encryption keys
   • BPost-quantum-only cryptography, which replaces all classical algorithms with quantum-resistant ones immediately
   • CClassical cryptography with longer key lengths, which increases the effective security against quantum attacks
   • DHybrid cryptography, which combines classical and post-quantum algorithms in the VPN key exchange
   Reveal Solution Discussion Select an answer first
4. 23foundation · medium

   How does hybrid cryptography in Palo Alto Networks enhance security during the transition to post-quantum cryptography?

   • AIt eliminates the need for certificate authorities.
   • BIt ensures that even if a post-quantum algorithm is later found to be flawed, the classical algorithm still protects the data.
   • CIt allows the use of weaker classical algorithms to reduce latency.
   • DIt makes all traffic encrypted with quantum key distribution.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A cryptographic engineer is reviewing NIST's post-quantum standardization. They need to select an algorithm for general-purpose encryption that is not a digital signature. Which algorithm should they choose?

   • ACRYSTALS-Dilithium, a digital signature algorithm
   • BSPHINCS+, a hash-based digital signature algorithm
   • CFalcon, a lattice-based digital signature algorithm
   • DCRYSTALS-Kyber, a key encapsulation mechanism for secure key exchange
   Reveal Solution Discussion Select an answer first
6. 25foundation · medium

   Which of the following is a category of post-quantum cryptographic algorithms?

   • ARSA-based cryptography
   • BLattice-based cryptography
   • CElliptic curve cryptography
   • DSymmetric key cryptography
   Reveal Solution Discussion Select an answer first