SEC+ 601 Blitz CRYPTO & PKI

What is the principal use of symmetric encryption?

What type of high assurance X.509 certificate may be used by a banking website?

If acme.com needs to host 4 sites with different host names, what is the best choice of certificate to save costs?

What is the primary use of Asymmetric Encryption? Choose two

You need to complete FDE for all mobile devices within 24 hours, Select the algorithm suitable for FDE?

A competitor pays an internal employee to steal intellectual property by hiding the data in a png image sent as e-mail?

What will prevent a hacker from stealing my user password database and performing an offline rainbow table attack?

You must ‘tag’ each item acquired, document the source, how & when it was collected, where it is stored, who has access?

How can a company ensure that a 3rd party Cloud provider is not using outdated security technologies?

What should we implement to ensure that exposure of a long-term private key won't compromise future sessions? Choose 2

What is it when a client submits an OCSP request, the web server returns the time-stamped response directly?

What type of CA should I use if I need certificates for my e-commerce site?

What is used to secure passwords in my Linux shadow file to mitigate the use of offline rainbow tables?

A cipher where the data is encrypted one bit at a time. This is MOST suitable for encrypting real-time traffic?

Which symmetric bulk encryption cipher is mandated to ensure FISMA compliance?

What will Bob use when digitally signing a document, to ensure non-repudiation?

What type of control is a biometric enabled access control vestibule, securing access to the datacenter?

What a forensic analyst uses to prove that the data she originally acquired has remained unchanged while in her custody?

What would be a the most secure choice of encryption for VPN connection between Fort Meade and NSA field offices?

Rather than return a whole CRL, this just communicates the status of the requested certificate?

When a user has their private key compromised, what is the FIRST action that should be taken?

How should you separate your Nuclear power plant network from your business network?

What does a web site administrator generate to obtain a certificate from a CA?

A Certificate Signing Request (CSR) is stored in what format?

What safeguard can we build into a web application, that protects customers being redirected to fraudulent sites?

What is used with PGP/GPG that enables users to trust one another's Public Key, rather than using CAs?

Why should you take your Root CA offline when not in use?

After installing a Windows server, a cybersecurity administrator needs to harden it, following security best practices?

A term used in key management, this refers to archiving a private key (or keys) with a third party?

Which algorithm is vulnerable to collisions?