EXAM STUDY GUIDE 2026 COMPLETE
QUESTIONS AND SOLUTIONS
◉What type of encryption is typically used for data at rest?
A. Asymmetric encryption
B. Symmetric encryption
C. DES
D. OTP. Answer: B. Symmetric encryption like AES is typically used
for data at rest. Asymmetric encryption is often used during
transactions or communications when the ability to have public and
private keys is necessary. DES is an outdated encryption standard,
and OTP is the acronym for onetime password.
◉Which one of the following is not an attribute of a hashing
algorithm?
A. They require a cryptographic key
B. They are irreversible.
C. It is very difficult to find two messages with the same hash value
,D. They take variable-length input. Answer: A. Hash functions do not
include an element of secrecy and, therefore, do not require a
cryptographic key
◉Susan would like to configure IPsec in a manner that provides
confidentiality for the content of packets. What component of IPsec
provides this capability?
A. AH
B. ESP
C. IKE
D. ISAKMP. Answer: B. The Encapsulating Security Payload (ESP)
protocol provides confidentiality and integrity for packet contents. It
encrypts packet payloads and provides limited authentication and
protection against replay attacks.
◉How many possible keys exist for a cipher that uses a key
containing 5 bits?
A. 10
B. 16
C. 32
D. 64. Answer: C. Binary keyspaces contain a number of keys equal
to two raised to the power of the number of bits. Two to the fifth
power is 32, so a 5-bit keyspace contains 32 possible keys.
, ◉Sherry conducted an inventory of the cryptographic technologies
in use within her organization and found the following algorithms
and protocols in use. Which one of these technologies should she
replace because it is no longer considered secure?
A. MD5
B. 3DES
C. PGP
D. WPA2. Answer: A. The MD5 hash algorithm has known collisions
and, as of 2005, is no longer considered secure for use in modern
environments.
◉Brent is selecting an encryption algorithm that will protect data
that has long-lasting sensitivity. He would like to select an algorithm
that is most resistant to quantum computing attacks. Which
algorithm would best meet his needs?
A. AES
B. RSA
C. DES
D. ECC. Answer: A. Answering this question requires combining
information different types of cryptographic flaws. First, symmetric
algorithms are thought to be resistant to future quantum attacks,
while asymmetric algorithms are likely vulnerable to these attacks.
Therefore, we can eliminate the two asymmetric algorithms as
options: RSA and ECC. Next, the DES algorithm is weak and should
no longer be used. That leaves us with the Advanced Encryption
Standard (AES) as the only viable answer.