QUESTIONS OBJECTIVE ASSESSMENT
WITH CORRECT SOLUTIONS||A+
GRADED||100% GUARANTEED
PASS||<<NEWEST VERSION>>
Caesar cipher - ANSWER ✓ an ancient cryptographic technique based on
transposition; involves shifting each letter of a plaintext message by a certain
number of letters (historically 3)
ROT13 cipher - ANSWER ✓ a more recent cipher that uses the same mechanism
as the Caesar cipher but moves each letter 13 places forward
symmetric key cryptography (private key cryptography) - ANSWER ✓ uses a
single key for both encryption of the plaintext and decryption of the ciphertext
block cipher - ANSWER ✓ A type of cipher that takes a predetermined number
of bits in the plaintext message (commonly 64 bits) and encrypts that block
stream cipher - ANSWER ✓ A type of cipher that encrypts each bit in the
plaintext message, 1 bit at a time
AES (Advanced Encryption Standard) - ANSWER ✓ A set of symmetric block
ciphers endorsed by the US government through NIST. Shares the same block
modes that DES uses and also includes other modes such as XEX-based Tweaked
CodeBook (TCB) mode
asymmetric key cryptography (public key cryptography) - ANSWER ✓ this
method uses 2 keys, a public key and a private key
SSL (secure sockets layer) - ANSWER ✓ a protocol that uses the RSA algorithm
(an asymmetric algorithm) to secure web and email traffic
, hash function (message digest) - ANSWER ✓ keyless cryptography that creates a
largely unique and fixed-length hash value based on the original mesage
hash - ANSWER ✓ used to determine whether the message has changed;
provides integrity (but not confidentiality)
digital signature - ANSWER ✓ a method of securing a message that involves
generating a hash and encrypting it using a private key
certificate - ANSWER ✓ created to link a public key to a particular individual;
used as a form of electronic identification for that person
CA (certificate authority) - ANSWER ✓ a trusted entity that handles digital
certificates
PKI (public key infrastructure) - ANSWER ✓ infrastructure that includes the CAs
that issue and verify certificates and the RAs that verify the identity of the
individuals associated with the certificates
RA (registration authority) - ANSWER ✓ An authority in a PKI that verifies the
identity of the individual associated with the certificate
CRL (Certificate Revocation List) - ANSWER ✓ a public list that holds all the
revoked certifications for a certain period of time
data at rest - ANSWER ✓ Data that is on a storage device of some kind and is not
moving
data in motion - ANSWER ✓ Data that is moving over a WAN or LAN, a
wireless network, over the internet, or in other ways
data at rest - ANSWER ✓ This type of data is protected using data security
(encryption) and physical security
data in motion - ANSWER ✓ This type of data is best protected by protecting the
data itself (using SSL, TLS) and protecting the connection (using IPsec VPN, SSL
VPN)
, data in use - ANSWER ✓ This type of data is the hardest to protect
encryption - ANSWER ✓ a subset of cryptography that refers specifically to the
transformation of unencrypted data into its encrypted form
decryption - ANSWER ✓ The process of recovering the plaintext message from
the ciphertext
authentication - ANSWER ✓ a set of methods we use to establish a claim of
identity as being true
corroborates the identity of an entity, whether it is the sender, the sender's
computer, some device, or some information
ECC (Elliptic Curve Cryptography) - ANSWER ✓ An asymmetric encryption
algorithm that uses smaller key sizes and requires less processing power than many
other encryption methods.
commonly used in smaller wireless devices
accountability - ANSWER ✓ this provides us with the means to trace activities in
our environment back to their source
nonrepudiation - ANSWER ✓ Refers to a situation in which sufficient evidence
exists as to prevent an individual from successfully denying that he or she has
made a statement, or taken an action
deterrence - ANSWER ✓ refers to elements that discourage or prevent
misbehavior in our environments
IDS (intrusion detection system) - ANSWER ✓ a monitoring tool that alerts when
an attack or other undesirable activity is taking place
IPS (Intrusion Prevention System) - ANSWER ✓ a tool that alarms and takes
actions when malicious events occur
auditing - ANSWER ✓ a methodical examination and review that ensures
accountability through technical means;
ensures compliance with applicable laws, policies, and other bodies of
administrative control, and detects misuse