Test your basic knowledge |

CISSP Crypto Domain

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Rearranges bits or bytes






2. Certificate Authority; registration authority offloads work; validates identity; distributes key; certificate server maintains repository that stores certificates






3. Keyword: integrity






4. Placementof a secret copy in a secure location






5. CIA plus non repudiation






6. Prevent disclosure - privacy






7. Science of breakin the code






8. International Data Enc Algorithm - 64 bit block - 128 bit key






9. Spartans - wrapped around rod.






10. Cannot deny ownership / origination.






11. Electronic Code Book Each block encrypted independently; 64 bits at a time; using same key; given message; always same ciphertext; susceptible to plaintext attack






12. Function that takes a variable length string; and compresses and transforms it into a fixed length- output called a hash or message digest






13. Carlisle Adams and Stafford Tavares; CAST 128 64 bit block cipher-uses keys between 48 and 128 bit lengths 12 to 16 rounds of operations CAST 256 uses 48 rounds; of 128; 192; 160; 224; 256






14. Binary operation that adds bits together; plaintext is XORed with a random keystream to generate cyphertext






15. Estimated time resources to break a cryptosystem






16. DES - 3des - aes - idea - two fish - rc4 - blow fish






17. Instance when two keys keys generate the same ciphertext from same plaintext






18. variable block and key sizes 128; 192; 256; uses a variable number of rounds; has low memory requirements; easy to defend against timing attacks; implemented in software; hardware is costly.






19. Simple substitution - ROT-n - mono-alphabetical.






20. Credentials that allow verification; contains serial no; ident info; dig signature;lifetime dates;public key of the cert holder






21. Prove knowledge of a fact to a third party without revealing the fact itself






22. Link Encryption and end to end encryption






23. Malled online encryption or traffic flow security- implemented in hardware' encrypts all traffic in a single path






24. Block based - adds padding - same key - same clear = same ciphertext






25. Letters represented by numerical place in the alphabet






26. Storage of keys and certs for extended period of time-normally performed by CA a trusted third party; or key holder






27. Authenticity - integrity - digital signatures - storing passwords.






28. Caesar cipher - scytale - Blaise de vigenere - vernam cipher






29. Public Key Infrastructure- Developed to provide standards for key generation; authentication; x.509 non used with Pretty Good Privacy; good private good "web of trust"






30. NIST 1991 - outlines authorized algorithms






31. Single authority trust; heirarchal trust; web of trust; hybrid cross certificationusesd in businesses to trust each others CA's; and DISA Model Root; intermediate; leaf at the local levels






32. Upgrade to DES; Replaced by AES; takes three times longer to encrypt






33. Hardware - software - and policies (security association) -






34. Relies on finding weaknesses in the hashing algorithm






35. Message hidden within larger context.






36. Rearrances the bits characters or character blocks






37. Attmpts to conceal data by hiding it; Used by placing information in objectssuch as graphics; sound files or document headers






38. Output feedback; emulates stream cipher; similar to CFB except qty XORed; with each plaintext block; IV used as a seed; then keystream used as IV in continuing process






39. Has authority to remove keys from escrow;






40. Digital signature standard; performs integrity by SHA; uses DSA; RSA;Elyp CurveDSA






41. When a hash fuunction generates same output for same input






42. Block based - Previous block seeds next blocks key






43. Symmetric for Bulk Encrypt; assym for key encapsulation- used in SSL; Email; key exchange






44. Each pair of entities must receive in secure fashion; requires more overhead than worth; key distro challenging- sender recievermust be on the same sheet






45. Provided by mixing up the location of plaintext throughout the cipher






46. No plaintext exposure; encrypted at source; VPN; SSL ;SSH






47. Secret; single; conventional; session; shared; private






48. Replaces bits characters and block s with differecnt values






49. 32 to 448 bit key - Schneier






50. Advanced Encryption Standard - replaced DES - Rijndael based - 128 - 192 - and 256 bit keys/blocks with 10 - 12 - 14 rounds resp.