Protects against credentials phishing

Which of the following statements is true?

ECC keys can be generated faster than equivalent RSA keys

The file "/etc/shadow" contains...

Information about which algorithms are used to protect passwords

PoW can be used for...

Rate limiting / DDoS protection

Available as a public FIPS standard

The security of an encryption system should NOT depend on...

Keeping it's inner workings secret

"Attestation certificates" can be used to...

Prove that a secret is unexportable

An OpenPGP certificate...

May contain multiple public keys

Supported by most operating systems

Mutually validate identity of TLS peers

The "CAB Forum" exist to...

Set standards for CA inclusion in truststores

Standard for encryption in hardware storage devices

Check revocation status of certificates

Ransomware typically encrypt victim files using...

Publicly-standardized cryptography algorithms

studbud

KryptO_Course

98 termsStudBud Administration6 plays

Imported from external platform

Flashcards98 cardsFPractice quizPHost liveL

Questions 98

Answers

1
"Certificate transparency" exist to...
Really don't know
Validate which CSR key signed a certificate
Detect misuse of public CAs
Set rules for public CAs
2
SSS is used for...
Don't know
Securely hashing secrets
Symmetrically encrypting files
Multi-party decryption
3
KDFs are used to...
Ensure security in many block cipher modes
Symmetrically encrypt keys
Don't really know
Generate encryption keys
4
Which of the following is NOT a symmetric cipher?
Chacha20
RC4
ECC
DES
5
Which of the following hash functions is recommended for new applications?
SHA-3
SHA-1
SHA-256
SHA-2
6
WebAuthn...
Protects against credentials phishing
Is used to encrypt data in web browsers
Don't know
Relies on mutual TLS
7
The Vigenère cipher is used for...
One-way encryption
Asymmetric decryption
Decrypt Ceasar ciphers.
Symmetric encryption
8
Which of the following statements is true?
ECC public keys are much large than in RSA
Don't really know
ECC is better supported in HW than RSA
ECC keys can be generated faster than equivalent RSA keys
9
A CSPRNG is suitable for...
Hash chains
I really don't know :-/
Key generation
Low-entropy environments
10
Many random number generators are "initialized" using a...
Hash
Seed
Prefix
Pollen
11
"NIST P-256" is...
Don't really know
Another name for SHA-2 256
An elyptic curve
A standard for symmetric signing
12
"NIST P-384" is...
A standard for symmetric signing
An elyptic curve
Another name for SHA-2 384
Don't know
13
Kyber and Dilithium are...
Cryptographically-secure hash functions
Don't know
Symmetric ciphers
Asymmetric ciphers
14
The file "/etc/shadow" contains...
Don't really know
Information about which algorithms are used to protect passwords
Asymmetrically encrypted passwords
List of users and their group memberships
15
PoW can be used for...
Multi-party decryption
Don't know
Providing knowledge of a secret without revealing it
Rate limiting / DDoS protection
16
Full-disk encryption relies on...
RNG
Key derivation functions
Asymmetric cryptography
Symmetric cryptography
17
How large should an RSA key be to be considered secure by NIST?
3000 bits
4096 bits
1024 bits
256 bits
18
AES is...
An encryption algorithm published by NTT
Available as a public FIPS standard
Primarly used as a stream cipher
Really don't know
19
The term "public-key encryption" is another name for...
Symmetric encryption
Asymmetric encryption
Cryptographic hashing
Don't really know
20
Which of the following is NOT a hash function?
RC4
MD4
MD5
BLAKE
21
Windows stores passwords using..
MD4
AES
SHA-2
MD5
22
Which of the following is NOT a hash cracking tool?
Hashcat
Don't really know
Whonix
Ophcrack
23
The security of an encryption system should NOT depend on...
Don't really know
Keeping it's inner workings secret
The choosen key/password
Public auditing
24
BitLocker is used for...
Don't really know
Encrypted communication
Asymmetric signing
Drive encryption
25
What is the name of Windows' password store?
BOB
ROB
SAM
PAM
26
"Attestation certificates" can be used to...
Prove that a secret is unexportable
Convert a X.509 certificate to an OpenPGP certificate
Don't know
Request a CSR from a CA
27
TLS is designed to protect communication...
Integrity
Anonymity
Availability
Don't really know
28
ECB is a...
Block cipher mode of operation
Don't really know
Asymmetric encryption algorithm
Solution for key generation
29
"Slow" hashing algorithms are desirable for...
PoK
FIM applications
Password storage
PoW
30
The security of many block cipher modes relies on...
Password salting and hashing
Hardware acceleration (AES-NI)
An initialization vector (IV)
Don't really know
31
KDFs are used to...
Symmetrically encrypt keys
Ensure security in many block cipher modes
Don't really know
Generate encryption keys
32
For encryption at OSI layer two...
Don't really know
IPSec is used.
SSL is used.
MACSEC is used.
33
An OpenPGP certificate...
Must be signed by a third-party
May contain multiple public keys
Is interoperable with X.509
Don't know
34
Certificates should be validated against a CRL by...
Don't really know
Both peers
The server
The Client
35
IPSec is...
Fast and modern
Providing layer 2 encryption
Supported by most operating systems
Don't really know
36
Cryptographic hashing is commonly used for...
Generating encryption keys
Decrypting data
Compressing storage archives
Don't really know
37
mTLS is used to...
Monitor encrypted traffic
Mutually validate identity of TLS peers
Don't really know
Use TLS on low-end/mobile devices
38
The term "public-key encryption" is another name for...
Symmetric encryption
Don't really know...
Cryptographic hashing
Asymmetric encryption
39
The Vigenère cipher depends on...
A passphrase
Shifting the alphabet
Salting for security
Don't really know
40
A "password salt" should be...
Unique per account in a system
The same for all users in an application
Publicly available
Don't really know
41
The "CAB Forum" exist to...
Don't know
Set standards for CA inclusion in truststores
Develop the WebAuthn standard
Standardise cryptography algorithms
42
Which of the following is considered insecure?
AES
ECC
ChaCha
(3)DES
43
"TCG Opal" is a...
Really don't know.
Insecure block cipher mode in AES
Standard for encryption in hardware storage devices
Hashing algorithm typically used for storing passwords
44
OCSP is used to...
Revoke compromised certificates
Download certificate revocation lists
Don't really know
Check revocation status of certificates
45
PSK stands for...
Pseudo-random Secure Key
Pre-Shared Key
Pretty Scary Key
Password Salting Key
46
The file "/dev/urandom"...
May run out of random data
Generates infinite entropy
Provides randomness unsuitable for cryptography
Really don't know
47
The primary purpose of Tor is to protect...
Don't really know
Anonymity
Integrity
Confidentiality
48
GPG is typically used to...
Encrypt software
Don't really know
Sign messages
Generate random numbers
49
Ransomware typically encrypt victim files using...
Duct tape
Static keyphrases
Publicly-standardized cryptography algorithms
Asymmetric cryptography
50
A X.509 certificate contains...
A private key
Don't really know
A CRL file
An expiry date
51
Open-source cryptography solutions enables...
Security through obscurity
Public auditing
Proof of Knowledge
Proof of Work
52
SHA-3 is standardised by...
GOST
SvFF
GCHQ
NIST
53
DES is used for...
Symmetric encryption
Asymmetric signing
Don't really know
Key-derivation functions
54
Hash digests are most commonly represented in...
Base54
Octal form
Base16
Hexadecimal
55
"age" is used for...
Symmetric and asymmetric file encryption
Encrypting YubiKeys
Asymmetric disk/block encryption
Don't treally know
56
"Client-side hashing" of passwords...
Don't really know.
Shouldn't be combined with "server-side hashing"
Can minimize the consequences of a data breach
Provides no value in web applications
57
A HSM should ideally be...
Black
Tamper resistant
Built using closed-source firmware
Implemented in software
58
Gpg4Win...
Uses GnuPG "under the hood"
Is included in Windows 10 and later
Is closed-source software
Don't really know
59
Quantum computers primarily pose a risk to...
Asymmetric cryptography
Cryptographic hashing
Symmetric cryptography
Don't know
60
WebAuthn relies on primarily on...
Don't know
Symmetric cryptography
One-way hashing
Asymmetric cryptography
61
DSA is used for...
Don't really know
Symmetric cryptography
Asymmetric cryptography
Cryptographic hashing
62
A key generated on a HSM...
Relies on randomness generated by the OS
May be copied to the host system
Should not be exportable
Don't know
63
When creating password-protected 7Zip-archives, remember to...
Really don't know.
Enable header encryption
Use BLAKE as the KDF
Specify use of AES-3
64
Net-NTLMv2 is vulnerable against...
Rainbow table attacks
Relaying attacks
Don't know
Spoofing attacks
65
AES-NI is used for...
Hardware accelerated encryption
Systems with NIST requirements
Salting symmetric encryption
Don't really know
66
"Proof of Knowledge" authentication...
Don't really know
Prevents persistent password/key from being transmitted over the network
Requires lots of energy/computing power
Always depend on one-way hashing
67
Windows stores passwords
Using MD5
Don't really know
Without salt
Using asymmetric encryption
68
The block cipher mode "GCM" provides...
Fast asymmetric encryption
Security without an IV
Integrity protection
Don't really know
69
OCSP is used to...
Revoke compromised certificates
Download certificate revocation lists
Check revocation status of certificates
I really don't know :-/
70
If you want to encrypt messages to a recipient without sharing a secret key, utilize...
Symmetric cryptography
Don't really know
Asymetric cryptography
Cryptographic hashing
71
A CSR is used to...
Don't really know
Check if a certificate has been revoked
Sign certificates
Request a certificate from a CA
72
Besides key storage, many HSMs provide...
PNG
TOFU
RNG
PKCS#12
73
AES-NI is used for...
Hardware accelerated encryption
Systems with NIST requirements
RNG
Salting symmetric encryption
74
Private keys generated on a HSM should NOT be...
Extendable
Portable
Exportable
Elyptic
75
Which of the following hashing functions is generally considered secure?
SHA-3
MD5
Don't really know
MD4
76
SHA stands for...
Secure Hardware Accelerator
Don't really know
Secure Hashing algorithm
Symmetric Hashing Algorithm
77
To increase the difficulty of cracking a password hash, utilize...
Don't really know
A Proof of Knowledge challenge
Multiple "rounds" of hashing
Slow functions like MD4
78
Webauthn does NOT rely on...
I really don't know :-/
Public-key cryptography
The site origin
A CA
79
"PKCS #11" is a...
Don't know
Cryptographically Secure Random Number Generator
Format used for truststores/certificate bundles
Standard interface for applications to access HSMs
80
Usage of the "TOFU" trust model...
Relies on certificate authorities
Enables all key holders to sign others' certificates
Does not fully protect against MITM attacks
Is always better than MEAT
81
A X.509 "trust store" contains...
The private key associated with a client/server certificate
Web of Trust configuration
Certificates for CAs
Don't really know
82
To identify erronous input of sensitive data, utilize...
Don't know.
Check digits
Cryptographic hashing
Symmetric encryption
83
"Intermediate CAs" are used to...
Provide short-lived CSRs
Sign "root CA" certificates
Generate software-signing certificates
Don't really know
84
ChaCha20 is a...
Stream cipher
Really don't know
Block cipher
Hash cipher
85
DSA is used for...
Don't know
Asymmetric cryptography
Cryptographic hashing
Symmetric cryptography
86
SHA-2...
Has publicly known collision flaws
Provides two-way encryption
Typically produces 256 bit long hashes
Don't really know
87
Cryptographically secure hashes should NOT...
Be based on symmetric encryption algorithms
Produce the same output for the same input
Don't really know
Generate the same output for different inputs
88
If you need to use an encrypted USB drive on multiple different operating systems, an option is...
AirLock
BitLocker
VeraCrypt
Wolf Security
89
The Caesar cipher relies on...
Steganography
Shifting the alphabet
A keyword/keyphrase
Don't really know
90
To identify erronous input of sensitive data, utilize...
Asymmetric cryptography
Symmetric encryption
Cryptographic hashing
Check digits
91
PKCS#12 is a...
A KDF
Format used for truststores/certificate bundles and private keys
Standard interface for applications to access HSMs
Don't know
92
"LM hashes" in Windows rely on...
ChaCha20
MD4
DES
SHA-3
93
TLS version 1.3 is...
Used for layer 2 encryption
An open standard
Generally considered insecure
Don't really know
94
/etc/passwd contains...
List of users on the system
Salted password hashes for users
Don't really know
The SAM database
95
Which AES cipher mode should be avoided?
ECB
XFS
CCM
EXT4
96
When a hash function provides the same hash digest for different input data, it's called a...
Collision flaw
Key derrivation function
Flush
One-way encryption cipher
97
Ciphertext should be immune to...
Position analysis
Frequency analysis
Keyword analysis
Temperature analysis
98
Steganography is the practice of...
Generating asymmetric key pairs
Obscuring secrets in other information
Asymmetrically encrypting passwords
Symmetrically encrypting passwords

KryptO_Course Flashcards | StudBud