What is a strength of using a hashing function?

It is a one-way function and not reversible.

What can a user do to ensure that their newly created program is not changed when downloaded?

Create a hash of the program file to verify integrity.

What are three type of attacks that are preventable through the use of salting?

lookup tables, reverse lookup tables, and rainbow tables.

What are two best practices in implementing salting?

should be unique for each password, and should not be reused

A forensic image and a hash is taken of a USB drive. What can be proven in court?

Data in the image is an exact copy & nothing's been altered.

studbud

Cybersecurity Essentials - Chapter 5

16 termsStudBud Administration111 plays

Cybersecurity Essentials Chapter-5 Quiz

Flashcards16 cardsFPractice quizPHost liveL

Questions 16

Answers

1
What is a strength of using a hashing function?
It is a one-way function and not reversible.
It can take only a fixed length message.
Two different files can be created that have the same output
It has a variable length output.
2
What are the key elements needed to implement HMAC?
secret key and message digest
message digest and asymmetric key
symmetric key and asymmetric key
IPsec and checksum
3
Which method tries all possible passwords until a match is found?
rainbow tables
dictionary
cryptographic
brute force
4
What are three NIST-approved digital signature algorithms?
RSA, ECDSA, and SHA1
MD5, RSA, and ECDSA
DSA, RSA, and ECDSA
DSA, SHA256, and MD5
5
IPsec & SHA-1 is implemented for inbound external connections. What security tool can be used?
ISAKMP
SHA256
HMAC
MD5
6
What can a user do to ensure that their newly created program is not changed when downloaded?
Distribute the program on a thumb drive.
Create a hash of the program file to verify integrity.
Install the program on individual computers.
Turn off antivirus on all the computers.
7
What are three type of attacks that are preventable through the use of salting?
lookup tables, guessing, and reverse lookup tables.
lookup tables, guessing, and social engineering.
phishing, shoulder surfing, and social engineering.
lookup tables, reverse lookup tables, and rainbow tables.
8
What can be added to an email message to ensure the message came from the intended person?
digital signature
non-repudiation
hashing
asymmetric key
9
What is the standard for a public key infrastructure to manage digital certificates?
x.503
PKI
x.509
NIST-SP800
10
What are three validation criteria used for a validation rule?
type, encryption, and key
size, range, and format
size, type, and range
format, encryption, and key
11
Identify three situations in which the hashing function can be applied.
PKI, PPoE, and DES
IPsec, CHAP, and PKI
IPsec, CHAP, and WPA
DES, PKI, and WPA
12
What are two best practices in implementing salting?
should be unique for each password, and should not be reused
should be used for each password, and should be short
should be 1 byte in length, and should be reused many time
should be short, and should not be reused
13
A forensic image and a hash is taken of a USB drive. What can be proven in court?
Data in the image is an exact copy & nothing's been altered.
A USB drive was found and a copy was made.
The data is all there.
An exact copy cannot be made of a device.
14
A downloaded driver creates a message "the driver isn't approved". What does the software lack?
valid ID
source code
digital signature
code recognition
15
Alice & Bob use the same password. What could prevent both password hashes from being the same?
RSA
salting
pseudo-random generator
peppering
16
What is the purpose of CSPRNG?
to process hash lookups
to prevent a computer from being a zombie
to secure a web site
to generate salt

Cybersecurity Essentials - Chapter 5 Flashcards | StudBud