1The hash value in bits for MD5 is ____.
2Hashing involves taking a _____ length input and producing a _____ length output (message digest).
- fixed; variable
- variable; fixed
- fixed; fixed
3
The hash value in bits for SHA-1 is ____.
4The hash value in bits for MD4 is ____.
5IPSec ______ mode involves "end-to-end" encryption; i.e. data remains encrypted from the time it leaves a sender's device to the time it arrives at the receiver's device.
6IPSec ______ mode involves encryption from gateway to gateway, i.e. just through the public network space.
7A security analyst on a local network using monitoring tools is likely to only be able to read contents of traffic encrypted using IPSec ______ mode.
8_____ is a lightweight cryptography method for signing messages (MAC). It boasts a relatively undemanding hardware implementation (only ~3,333 gates required at 1MHz clock rate) making it suitable for IoT implementation.
Chaskey
9Chaskey has a key size of _____ bits.
10A weakness of one-way hashing is that the same piece of plaintext will result in the same ciphertext unless _____ is applied.
11The minimum recommended key size to use with RC4 is _____ bits.
12RC4 is a symmetric stream cipher with a variable key size up to a max of _____ bits.
13_____ has a block size of 64 bits, key size of 56 bits, and 16 rounds of substitution & transposition.
14A(n) _____ is a collection of precomputed hash values of actual plaintext passwords used for password cracking.
- Rainbow Table
- Key Pair
- Initialization Vector
15_____ is a common x.509 certificate file type that is used with both PEM and DER formats.
16_____ has a block size of 64 bits, key size of 112 bits, and 48 rounds of substitution & transposition.
17Key sizes used with the Advanced Encryption Standard (AES) include _____. _____, or _____.
- 32, 64, 80
- 10, 12, 14
- 128, 192, 256
18The Advanced Encryption Standard (AES) operates using _____ bit blocks.
19
Skipjack is a symmetric block cipher that uses a ______ bit key.
20Enocoro operates with a key size of ______ bits and an initialization vector (IV) of _____ bits.
21Skipjack has a block size of _____bits.
22PHOTON, SPONGENT, Lesamnta-LW, and Quark are examples of light-weight _____.
- Symmetric Block Ciphers
- Hashing Algorithms
- Public-key Algorithms
23_____ has a block size of 64 bits, key size of 128 bits, and >17 rounds of substitution & transposition.
24_______ is a partially homomorphic crypto system that leverages prime number characteristics, operates with a 1024-4096 bit variable key size, and 1 round.
25Blowfish and Twofish are both _____ ciphers with common key sizes of 128, 192, or 256 bits.
- Symmetric Stream
- Symmetric Block
- Asymmetric
26_____ is a symmetric block cipher that uses block sizes of 32, 64, or 128 bits and boasts a variable key size up to 2048 bits.
27Quark produces a hash value of _____bits.
28
The block size used with XTEA is _____ bits.
29The key size used with XTEA is _____ bits.
30Camelia is a _____.
- Symmetric Block Cipher
- Symmetric Key Exchange Algorithm
- Hash Algorithm
31RC6 can best be described as a _____.
- Symmetric Block Cipher
- Lightweigth Hash Algorithm
- Symmetric Stream Cipher
32RC2 has a block size of 64 bits and variable key size up to 128 bits. What is the minimum recommended key size to use when employing RC2?
33The light-weight symmetric steam cipher Mickey v2 operates with a key size of ______ bits and an initialization vector (IV) variable up to _____ bits.
34RC4 is a(n) _____.
- Symmetric Stream Cipher
- Asymmetric Algorithm
- Symmetric Block Cipher
35An entity seeking to obtain a digital certificate must generate and submit a _____ request to a certificate authority to request the certificate.
- Certificate Binding
- Certificate Signing
- Certificate Initialization
36ChaCha is a(n) _____.
- Symmetric Block Cipher
- Asymmetric Algorithm
- Symmetric Stream Cipher
37RSA and DSA are both_____.
- Symmetric Stream Ciphers
- Hash Algorithms
- Asymmetric Algorithms
38_____ provides a method for key exchange using a one-way function.
- Quark
- Diffie-Hellman
- A Hash Algorithm
39_____ is a Lightweight cryptography method for signing messages (MAC).
- Vigenere
- Chaskey
- Diffie-Hellman
40WEP uses _____-bit RC4.
41An entity seeking to obtain a digital certificate must first generate a _____ for themselves.
- Registration Authority
- Asymmetric Key Pair
- Secret Key
42WPA uses _____-bit RC4.
43Wi-Fi Protected Access 2 (WPA2) uses 128-bit _____.
44_____ substitution is where a single mapping from our alphabet to a cipher alphabet is created.
- Pseudo-random
- Polyalphabetic
- Mono-alphabetic
45What step will a certificate authority (CA) take after generating a digital certificate for a requester, but before issuing the certificate to that requester?
- Sign the certificate with the CA's own private key
- Sign the certificate with the requester's private key
- Sign the certificate with the CA's own public key
46_______ refers to the mapping of our alphabet to a number of cipher alphabets
- Mono-alphabetic
- Polyalphabetic
- Pseudo-random
47_____ is considered to be unbreakable since it only uses its cipher code once.
One-time pad
48_____ encoding involves 8-bit values and supports up to 256 characters
ASCII
49A _____ occurs when two different input values produce the same hash signature.
50_____ is an encoding method with 16-bit values and supports up to 65,536 characters.
UTF-16
51The light-weight symmetric stream cipher Trivium operates with a key size of ______ bits and an initialization vector (IV) of _____ bits.
52A _____ is a tamper-evident and intrusion-resistant physical device that safeguards and manages cryptographic keys and provides cryptographic processing.
53A _____ is a dedicated processor that handles hardware-level encryption; allows the use of full disk encryption on a hard drive in a manner that minimizes the impact on system performance.
54_____ is a message authentication code (MAC) that can be used to verify the integrity and authentication of the message. It involves hashing the message with a secret key, and thus differs from standard hashing, which is purely a one-way function.
- Key Escrow
- Rainbow Table
- HMAC
55_____ ciphers make use of a single secret key for both encryption and decryption.
Symmetric
56Solve by applying the binary XOR function.
1 1 0 1 1
1 0 0 0 0
57Solve by applying the binary AND function.
11011
10000
58Solve by applying the binary OR function.
11011
10000
61The two types of symmetric ciphers are _____ and _____
- CTR, DES
- Active, Passive
- Block, Stream
62When encrypting data using asymmetric cryptography, which key should be shared or distributed to facilitate decryption?
- Secret Key
- Private Key
- Public Key
63_____ are used to manage how blocks of data are processed in symmetric encryption.
- Block Cipher Modes
- Stream Ciphers
- Padding
64Which symmetric block cipher modes enable the block cipher to operate like a stream cipher?
- ECB, DES, ECC
- DSA, RSA, RC6
- CFB, OFB, CTR
65Symmetric block ciphers make use of _____ to perform substitution as part the encryption process.
66PRESENT is a light-weight symmetric block cipher with a key size of 80 or 128 bits, 32 rounds, and ______ bit block size.
67______ cryptography makes use of a key pair (one public, one private) to perform encryption and decryption. If a given key in a key pair is used for encryption, only the opposite key in that key pair can perform the reverse decryption.
68When encrypting data using symmetric cryptography, which key may need to be exchanged to facilitate decryption?
- Secret Key
- Private Key
- Public Key
69RC5 is a conventional symmetric block cipher that is suitable for light-weight implementations. It has a variable key size with a max of _____bits.
70What is the block and key size in bits used by the light-weight symmetric block cipher CLEFIA?
- 64 or 80 bit blocks; 128 bit keys
- 64 bit blocks; 64 bit keys
- 128 bit blocks; 128, 192, or 256 bit keys
71If Shawn employs public key cryptography to send Sue a digitally signed message, which key will Sue use to decrypt the message?
- Sue's Public Key
- Shawn's Private Key
- Sue's Private Key
72_____ is a public key encryption method that is an extension of El Gamal but adds a one-way hashing method which protects against an adaptive chosen ciphertext attack.
- Ephermeral
- Key Clustering
- Cramer-Shoup
73With _____ encryption, we can perform mathematical operations on ciphered values i.e., before decryption.
- Polyalphabetic
- Quantum
- Homomorphic
74_____ allows for a new unique passcode to be created for each instance, based on an initial seed and for a given time period.
- Timed One Time Password (TOTP)
- One Time Passwords (OTP)
- Hashed One Time Passwords (HOTP)
75Which encoding scheme for x.509 certificates supports Base64 and ASCII formats?
76If Shawn plans to employ asymmetric cryptography to send Sue a digitally signed message, which key will Shawn use to sign the message?
- Sue's Private Key
- Shawn's Private Key
- Sue's Public Key
77If Shawn employs public key cryptography to send Sue a digitally signed message, which key will Sue use to verify the message?
- Sue's Public Key
- Sue's Private Key
- Shawn's Public Key
78Rabbit, Mickey v2, Trivium, Grain, and Enocoro are examples of light-weight _____ ciphers.
- Symmetric Stream
- Symmetric Block
- Public-key
79If Shawn plans to employ public key cryptography to send Sue a digitally signed message, which key will Shawn use to encrypt the message?
- Shawn's Public Key
- Sue's Public Key
- Sue's Private Key
80Which encoding scheme for x.509 certificates supports binary formats?
81_____ describes one-way or irreversible encryption used for protecting the integrity of data and in authentication applications.
- Key Escrow
- Hashing
- Symmetric Encryption
82NIST categorizes servers, desktops, tablets and smart phones as devices within the device spectrum for _____cryptography.
- Non-cryptographic
- Light-weight
- Conventional
83NIST categorizes embedded systems, RFID, and sensor networks as devices within the device spectrum for _____cryptography.
- Non-cryptographic
- Conventional
- Light-weight
84_____ allows a new unique passcode to be created each instance, based on a counter value and an initial seed.
- Hashed One Time Passwords (HOTP)
- Timed One Time Password (TOTP)
- One Time Passwords (OTP)
85_____ computers have fast multiplication circuits, and thus can be used to perform multiplications and search a range of prime numbers at a speed which would break most existing RSA implementations.
86_____ is a light-weight symmetric block cipher with variable block sizes, key sizes, and rounds, that is optimized for
hardware implementations.
87_____ is a light-weight symmetric block cipher with variable block sizes, key sizes, and rounds, that is optimized for
software implementations.
88PRESENT is a symmetric block cipher that was one of the first to be considered as a(n) _____ replacement for light-weight implementations.
89Rabbit operates with a key size of ______ bits and an initialization vector (IV) of _____ bits.
90______ is a secret key encryption algorithm, designed by the NSA, and was used with the Clipper chip.
91The IV used with WEP is ____ bits.
92The IV used with WPA is _____ bits.
93Two variations of WPA are ____ and ____.
- MIC, MOC
- PSK, Enterprise
- Transport, Tunnel
94A5/3 is for _____ , and is based on the MISTY1 cipher.
95A5/1 is designed to be used for the _____ network.
96Google proposed _____ as an alternative to AES to be used with TLS connections.
97_____ is a light-weight public key solution that uses Elliptic Curves along with a Diffie-Hellman related handshake between the RFID tag and the RFID reader in RFID implementations.
98Buzhash, Cityhash, Spookyhash, and Bernstein are examples of _______ hash solutions.
- Quantum
- Light-weight
- Non-cryptographic
99____ allow for a new unique passcode to be created for each instance based on an initial seed.
- One Time Passwords (OTP)
- Hashed One Time Passwords (HOTP)
- Timed One Time Password (TOTP)
100The IPSec handshake takes place on UDP port _____ for key exchange.
101What is the protocol number for encapsulating security protocol (ESP)?
102What is the protocol number for IPSec Authentication Header (AH)?
103With SSL/TLS, the tunnel is created with a _____ key method, and then a signature is created with a defined hashing method.
- Symmetric
- Transport
- Asymmetric
104With a _____ tunnel we aim to create a connection from a host machine to a trusted network, and which is tunneled through a public network
- Virtual Machine
- Telnet
- Virtual Private Network (VPN)
105_____ involves using subscriber computers to route data packets over the internet, instead of using publicly available routers.
- Sandboxing
- Onion Routing
- Whitelisting
106With the ____ network, the routing is done using computers of volunteers around the world to route the traffic around the Internet, and within each hop the chances to trace the original source significantly reduces.
107Establishing a fingerprint or thumbprint in cryptography is achieved by _____ algorithms.
108A blockchain mining process where a new block of transactions is added to the blockchain and transactions within the block are considered to be processed occurs every ______ minutes or so.
109____ describes a ledger of transactions that allows the Bitcoin network to know the number of bitcoins that a given user has in their account.
110Bitcoin transactions will be captured by ______ who will compile a list of the latest transactions.
- Miners
- Bankers
- Administrators
111Regarding blockchain, miners receive _____ for successful mining efforts.
- Contracts
- Penalties
- Rewards
112____ are programs stored on a blockchain that run when predetermined conditions are met; they typically are used to automate the execution of an agreement so that all participants can be immediately certain of the outcome, without an intermediary's involvement or time loss.
- Smart Contracts
- Miners
- Pseudo Codes
113Within Ethereum applications we define the concept of _____ . This is basically the unit that is used to measure the amount of work that is required to perform a single Keccak-256 hash.
114A _____ backdoor describes an instance where it is where it is mathematically possible for government agents to crack the encryption, but no-one else can.
- Key Escrow
- True Random
- NOBUS
115Cipher cracking method where the intruder uses brute force to decrypt the ciphertext and tries every possible key.
- Active Attack
- Known Plaintext
- Exhaustive Search
116Cipher cracking method where the intruder is hidden between two parties and impersonates each of them to the other.
- Known Plaintext
- Cut-and-Paste
- MITM
117Cipher cracking method where the intruder knows part of the ciphertext and the corresponding plaintext. The known ciphertext and plaintext can then be used to decrypt the rest of the ciphertext.
- Exhaustive Search
- Known Plaintext
- Active Attack
118Which certificate management stage certificate involves certificate retrievalecovery and certificate validation?
- Initialization
- Cancellation
- Issued
119During which stage of certificate management does certificate expiration and revocation take place?
- Cancellation
- Initialization
- Issued
120Certificate distribution takes place in the _____ stage of certificate management.
- Issued
- Initialization
- Cancellation
121A CRL must be published by the _____ who originally generated the targeted certificates.
122An alterative to the CRL is to use_____, an online service used to check the validity of a certificate.
123What is the main difference between a certificate in revoked status and a certificate in hold status?
Hold status can be reversed; revoked status cannot be reversed
124A certificate that has been compromised, updated, or superseded warrants being ______.
125A ____attack involves determining the amount of time that a user takes to decrypt the message; from this the key could be found.
126A ___ attack is where an attacker mixes parts of two different encrypted messages and is able to create a new message. This message is likely to make no sense but may trick the receiver into doing something that helps the intruder.
- Replay
- Man-in-the-Middle
- Cut-and-Paste
127___ describes an instance where an attacker takes a legitimate message and sends it into the network at some future time.
- Crypto Spoofing
- The Replay System
- Known Plaintext Attack
128A ___ attack occurs when an attacker is hidden between two parties and impersonates each of them to the other.
- Time Resetting
- Man-in-the-Middle
- Brute Force
129Key escrow and NOBUS (nobody but us) are two methods that can facilitate a ____ condition in cryptography.
- Exhaustive
- Lockout
- Backdoor
130Ethereum, and Hyperledger are considered common options for implementing _____.
- Message Digests
- Secure Tunnels
- Blockchain
131___ is an early cipher that makes use of a grid and which maps the letters into numeric values.
132____ is an early cipher that uses a 5 × 5 matrix containing the alphabet less the letter J. Cipher/decipher process consists of a set of rules outlining use of column and row combinations.
133_____ is a mono-alphabetic substitution cipher that makes use of mapping plaintext characters to graphical characters rather than to alphabetic ones.
134_____ is polyalphabetic early cipher that involves using a different mapping, based on a keyword, for each character of the cipher.
- Rail Code
- Vigenere
- Playfair
135____ is a mono-alphabetic substitution cipher known as "shift" cipher that involves plaintext being replaced by a letter some fixed number of positions down the alphabet.
- Four-square Cipher
- Caesar
- Vigenere
136____ is an early cipher that uses four 5 × 5 matrices arranged in a square, are where each matrix contains 25 letters for encoding and decoding operations.
- Four-square Cipher
- Caesar
- Playfair
137What is the block size for AES?
138With the _____ block cipher mode, the encrypted version of the IV produced in the first stage (during processing of the first block) is fed into the second stage and encrypted.
139What is the key size for 3DES?
140AES when operating with 10 rounds uses what key size?
141AES when operating with 10 rounds uses what block size?
142AES when operating with 14 rounds uses what key size?
143AES when operating with 12 rounds uses what key size?
144Which variation of Elliptic Curve cryptography is used to support symmetric key exchange?
145The Paillier cryptosystem supports _____ encryption.
146PKCS #__ is a standard used for password-based encryption.
147PKCS #__is used to sign and/or encrypt messages for PKI.
148AES can be susceptible to a copy-and-paste attack when used with which block cipher mode?
149___ has proven to be free from major vulnerabilities, but poor implementation of the encryption method leaves it susceptible to attacks such as: Brute force, use of Non-Random Numbers, copy-and-paste and timing attacks.
150_____ measures the amount of unpredictability, and in encryption it relates to the degree of uncertainty of the encryption process.
151For secure communications using HTTPS, the _____ is used to prove the identity of the server for which the Web browser connects to.
- Digital Signature
- Message Digest
- Digital Certificate
152A digital certificate contains the _____ key of the entity the certificate is issued to.
153WPA supported Temporal Key Integrity Protocol (TKIP), which used an initialization vector (IV) value of _____ bits.
154LM Hash is used in many versions of Microsoft Windows operating systems to store user passwords that are fewer than _____ characters in length.
155With a group of 70 people in a room, there is a 99.9% chance two of those people were born on the same day. This probability theory is used as a brute force method in cryptography called _______.
- Birthday Attack
- Phpass Attack
- Rainbow Table
156_____ provides a cryptography method to give a verifiable method that a data entity was created at a defined time.
157____ is a public key method that is used in both encryption and digital signing. It is used in many applications and uses discrete logarithms.
158____ is a method that involves generating a encryption key from a piece of the identity of the recipient.
159Secure sockets layer (SSL) uses which symmetric stream cipher?
160With the _____ block cipher mode, within the first stage (during processing of the first block), the data block is XOR'd with the encrypted version of the IV value. The output of the XOR function is then fed into the second stage and encrypted.
161The ___ block cipher mode facilitates parallel processing of data blocks.
162_____ cryptography is better suited for real-time communications implementations than ______ cryptography due to its relative faster speed.
- Symmetric, Asymmetric
- Asymmetric, Symmetric
- Asymmetric, Public Key
163With NTLM, each of the characters in a password are converted into _____.
164IPSec tunnel mode involves using _____ for routing.
- OSPF
- The Original IP Header
- A New IP Header
165IPSec transport mode involves using _____ for routing.
- The Original IP Header
- A New IP Header
- OSPF