Protects against credentials phishing

What do you enjoy the most?!

Acronyms!, Text-based flow-descriptions!, I really don't know :-/, Many graded tests and labs!

The "CAB Forum" exist to...

Set standards for CA inclusion in truststores

Attestation certificates produced by a Yubikey contains...

Information about configured authentication requirements

The security of an encryption system should NOT depend on...

Keeping it's inner workings secret

HSMs are designed to...

Control usage of encryption keys

"Key attestation" can be used to...

Determine if a secret has been generated on a HSM

A standard for interfacing with smart cards

"Perfect forward secrecy" aims to protect...

Long-term confidentiality of data

Check revocation status of certificates

Standard interface for applications to access HSMs

studbud

KRyPTOOv5

30 termsStudBud Administration97 plays

Imported from external platform

Flashcards30 cardsFPractice quizPHost liveL

Questions 30

Answers

1
A "password salt" should be...
Publicly available
Unique per account in a system
The same for all users in an application
I really don't know :-/
2
GnuPG/GPG is typically used to...
I really don't know :-/
Sign messages
Encrypt software
Generate random numbers
3
WebAuthn is used for...
Authorization
I really don't know :-/
Accounting
Authentication
4
Certificates should be validated against a CRL by...
Both TLS peers
The client
I really don't know :-/
The server
5
DSA is used for...
Cryptographic hashing
I really don't know :-/
Asymmetric cryptography
Symmetric cryptography
6
WebAuthn...
I really don't know :-/
Relies on mutual TLS
Is used to encrypt data in web browsers
Protects against credentials phishing
7
How large should an RSA key be to be considered secure by NIST?
4096 bits
1024 bits
3000 bits
I really don't know :-/
8
What do you enjoy the most?!
Acronyms!
Text-based flow-descriptions!
I really don't know :-/
Many graded tests and labs!
9
When creating password-protected 7Zip-archives, remeber to...
Enable header encryption
Specify use of AES-3
I really don't know :-/
Use BLAKE as the KDF
10
The "CAB Forum" exist to...
Standardise cryptography algorithms
I really don't know :-/
Set standards for CA inclusion in truststores
Develop the WebAuthn standard
11
WebAuthn relies on primarily on...
Symmetric encryption
One-way hashing
Asymmetric cryptography
I really don't know :-/
12
The block cipher mode "ECB" does NOT require a...
Initialization vector
Hardware acceleration
Shared symmetric key
I really don't know :-/
13
The primary purpose of onion routing is to protect...
Confidentiality
I really don't know :-/
Integrity
Anonymity
14
Attestation certificates produced by a Yubikey contains...
I really don't know :-/
The public key of Yubico's root CA
Information about configured authentication requirements
A private key generated on the device
15
Windows stores passwords...
I really don't know :-/
Using asymmetric encryption
Without salt
Using MD5
16
The security of an encryption system should NOT depend on...
Public auditing
The choosen key/password
I really don't know :-/
Keeping it's inner workings secret
17
HSMs are designed to...
Keep encryption ciphers secret
Increase computational costs for attackers
I really don't know :-/
Control usage of encryption keys
18
"Certificate transparency" exist to...
Set rules for public CAs
Validate which CSR key signed a certificate
Detect misuse of public CAs
I really don't know :-/
19
"Key attestation" can be used to...
Split a secret into multiple shares
I really don't know :-/
Determine if a secret has been generated on a HSM
Enable forward secrecy
20
PIV is...
I really don't know :-/
Providing secure password generation
A standard for interfacing with smart cards
Protecting many block-cipher modes against frequency analysis
21
"Perfect forward secrecy" aims to protect...
I really don't know :-/
Integrity of transferred data
Anonymity of source addresses/identities
Long-term confidentiality of data
22
To identify erronous input of sensitive data, utilize...
Cryptographic hashing
I really don't know :-/
Symmetric encryption
Check digits
23
OCSP is used to...
Download certificate revocation lists
I really don't know :-/
Revoke compromised certificates
Check revocation status of certificates
24
SSS is used for...
Securely hashing secrets
I really don't know :-/
Symmetrically encrypting files
Multi-party decryption
25
A key generated on a HSM...
Relies on randomness generated by the OS
Should not be exportable
I really don't know :-/
May be copied to the host system
26
"PKCS #11" is a...
Format used for truststores/certificate bundles
Cryptographically Secure Random Number Generator
I really don't know :-/
Standard interface for applications to access HSMs
27
The file "/dev/random"...
Provides randomness unsuitable for cryptography
Generates infinite entropy
I really don't know :-/
May run out of random data
28
DH/EDH/DHE is used for...
Asymmetric signing
Key exchange
Symmetric encryption
I really don't know :-/
29
"NIST P-256" is...
Another name for SHA-2 256
An elyptic curve
A standard for symmetric signing
I really don't know :-/
30
Which of the following is NOT a symmetric cipher?
Chacha20
ECC
DES
I really don't know :-/

KRyPTOOv5 Flashcards | StudBud