The "CAB Forum" exist to...

Set standards for CA inclusion in truststores

Check revocation status of certificates

Standard interface for applications to access HSMs

PoW can be used for...

Rate limiting / DDoS protection

Ransomware typically encrypt victim files using...

Publicly-standardized cryptography algorithms

Protects against credentials phishing

Protect confidentiality of transactions

"Attestation certificates" can be used to...

Prove that a secret is unexportable

An OpenPGP certificate...

May contain multiple public keys

studbud

KRyPTOOv6

35 termsStudBud Administration100 plays

Imported from external platform

Flashcards35 cardsFPractice quizPHost liveL

Questions 35

Answers

1
The "CAB Forum" exist to...
I really don't know :-/
Standardise cryptography algorithms
Set standards for CA inclusion in truststores
Develop the WebAuthn standard
2
Private keys generated on a HSM should NOT be...
I really don't know :-/
Extendable
Exportable
Elyptic
3
The block cipher mode "GCM" provides...
Security without an IV
Fast asymmetric encryption
I really don't know :-/
Integrity protection
4
A HSM should ideally be...
Built using closed-source firmware
Tamper resistant
I really don't know :-/
Implemented in software
5
Webauthn does NOT rely on...
A CA
I really don't know :-/
The site origin
Public-key cryptography
6
OCSP is used to...
I really don't know :-/
Revoke compromised certificates
Check revocation status of certificates
Download certificate revocation lists
7
How large should an RSA key be to be considered secure by NIST?
1024 bits
I really don't know :-/
4096 bits
3000 bits
8
WebAuthn relies on primarily on...
Symmetric encryption
One-way hashing
I really don't know :-/
Asymmetric cryptography
9
"PKCS #11" is a...
Standard interface for applications to access HSMs
I really don't know :-/
Cryptographically Secure Random Number Generator
Format used for truststores/certificate bundles
10
PoW can be used for...
Rate limiting / DDoS protection
Multi-party decryption
Providing knowledge of a secret without revealing it
I really don't know :-/
11
Ransomware typically encrypt victim files using...
I really don't know :-/
Asymmetric cryptography
Static keyphrases
Publicly-standardized cryptography algorithms
12
"Certificate transparency" exist to...
I really don't know :-/
Validate which CSR key signed a certificate
Detect misuse of public CAs
Set rules for public CAs
13
Besides key storage, many HSMs provide...
PKCS#12
I really don't know :-/
Tofu
RNG
14
The "Luhn algorithm" is used for...
Rate limiting
I really don't know :-/
Check digits
Cryptographically secure hashes
15
A key generated on a HSM...
May be copied to the host system
I really don't know :-/
Should not be exportable
Relies on randomness generated by the OS
16
Ciphertext should be immune to...
Keyword analysis
Frequency analysis
I really don't know :-/
Position analysis
17
Net-NTLMv2 is vulnerable against...
Relaying attacks
Spoofing attacks
I really don't know :-/
Rainbow table attacks
18
WebAuthn...
I really don't know :-/
Protects against credentials phishing
Relies on mutual TLS
Is used to encrypt data in web browsers
19
The file "/dev/urandom"...
Generates infinite entropy
I really don't know :-/
Provides randomness unsuitable for cryptography
May run out of random data
20
DSA is used for...
Cryptographic hashing
I really don't know :-/
Symmetric cryptography
Asymmetric cryptography
21
A CSPRNG is suitable for...
Low-entropy environments
Hash chains
I really don't know :-/
Key generation
22
A TPM is similar to a...
HSM
RNG
KDF
I really don't know :-/
23
Windows stores passwords...
Using asymmetric encryption
Without salt
I really don't know :-/
Using MD5
24
Bitcoin does NOT...
I really don't know :-/
Protect confidentiality of transactions
Utilize SHA-256 for PoW
Rely on hash chaining
25
Kyber and Dilithium are...
Cryptographically-secure hash functions
Asymmetric ciphers
Symmetric ciphers
I really don't know :-/
26
To identify erronous input of sensitive data, utilize...
Cryptographic hashing
Symmetric encryption
Check digits
I really don't know :-/
27
The Vigenère cipher is used for...
Asymmetric decryption
I really don't know :-/
Asymmetric decryption
Symmetric encryption
28
If you need to use an encrypted USB drive on multiple different operating systems, an option is...
VeraCrypt
BitLocker
I really don't know :-/
BLAKE
29
SSS is used for...
Securely hashing secrets
Multi-party decryption
Symmetrically encrypting files
I really don't know :-/
30
Certificates should be validated against a CRL by...
I really don't know :-/
The server
The client
Both TLS peers
31
Many random number generators are "initialized" using a...
Seed
Hash
I really don't know :-/
Prefix
32
Quantum computers primarily pose a risk to...
I really don't know :-/
Cryptographic hashing
Asymmetric cryptography
Symmetric cryptography
33
"Attestation certificates" can be used to...
Request a CSR from a CA
I really don't know :-/
Convert a X.509 certificate to an OpenPGP certificate
Prove that a secret is unexportable
34
An OpenPGP certificate...
Is interoperable with X.509
Must be signed by a third-party
I really don't know :-/
May contain multiple public keys
35
"NIST P-256" is...
A standard for symmetric signing
Another name for SHA-2 256
I really don't know :-/
An elyptic curve

KRyPTOOv6 Flashcards | StudBud