Test your basic knowledge |

Comptia Security +: Cryptography

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Allow client/server applcation to communicate in a secure manner across a network - TLS stands for






2. Password storage hash for Windows XP - separates password into two 7 character parts and converts to upper case






3. Asymmetric cryptography - hashes - and digital signatures provide __________






4. Pads messages to a length of 512 bits - then compresses to generate a 128 bit hash value






5. Method of encryption and decryption






6. Based on two keys - public and private - one-way function: a key cannot decrypt what it encrypts - provides confidentiality - authentication - integrity - and nonrepudiation - Discovered by Diffie and Hellman - also known as public key






7. Data encryption standard derived from IBM Lucifer algorithm - 56-bit key - 64-bit block - uses the Data Encryption Algorithm (DEA)






8. For encrypting web communications - uses Cryptographic Messaging Syntax (CMS) to protect individual message and response






9. A protocol suite for securing network connections using IKE - AH - and ESP






10. PGP and SSH






11. Common tunneling protocol integrated in Windows - works well with NAT - maybe blocked at firewall






12. Mechanism for message authentication that uses one of two algorithms (SHA-1 or MDF5) in combination with a shared secret key - also known as keyed hashing






13. A special mathematical function that peforms one way encryption - popular algorithms are SHA and MD - used to verify message/file integrity and passwords






14. Password storage hash for Windows systems after XP - uses MD4 and full unicode character set






15. Used by WPA - uses RC4 with IV - blocks replay attacks with packet sequence counter - replaced by WPA2






16. Process of transforming plaintext into unreadable format






17. Discovering the original message using other than normal means (i.e. "breaking" the cryptosystem)






18. Tunneling protocol originally used on UNIX - uses port 22 - typically used for remote administration - replaces telnet and FTP






19. Runs on top of TLS on port 443 - protected against MITM attacks and creates secure connections






20. An internet email standard format specifying how multimedia and attachments are handled






21. Most widely used asymmetric algorithm - used for digital signatures - key exchange - and encryption






22. Developed to replace DES based on Rijndael variable block cipher - has a fixed block length and key lengths: 128 - 192 - or 256 bits






23. Symmetric cryptography - asymmetric cryptography - and hashes provide __________






24. Impossible to find a message - given only message digest - impossible to find 2 messages that produce the same message digest






25. Block and stream






26. RSA - Diffie and Hellman - Elliptic Curve (EC) - DSS (Digital Signature Standard) - El Gamal - Merkel-Hellman






27. Digital signature standard that uses 2 algorithms: RSA and DSA (based on El Gamal) - both use the Secure Hash Standard (SHA-1)






28. PKI standard






29. Most widely used tunneling protocol - over port 1723 - data carried in an IP tunnel over Generic Routing Encapsulation (GRE)






30. Security enhancement for MIME - provides signed (SHA-1) and encrypted (RSA and Diffe-Helman) email messasges






31. Process of transforming ciphertext into plaintext (decipherment)






32. Tunneling protocol that merges PPTP with L2F - using port 1701 - is used over UDP - can be combined with IPSec for 5 layered encapsulation






33. Cipher block chaining (CBC) - cipher feedback (CFB) - electronic code book (ECB) and output feedback (OFB)






34. Unencrypted text - also called cleartext






35. Sender/receiver share the same key - fast - provides confidentiality - key management issue






36. Technique of encapsulating one packet of data within another type to create a secure link of transportation






37. DES - 3DES - AES - Twofish - Blowfish - IDEA - Skipjack - RC2 -RC4 - RC5 - RC6






38. A cryptographic protocol that provides security for communications over networks such as the Internet - more secure that SSL






39. Encrypted text - also called cryptogram






40. Free email security program that uses several algorithms - symmetric (IDEA) - asymmetric (RSA) and hashes (SHA1) and the web of trust






41. PPTP - L2TP - IPSec - and SSH






42. A cryptographic communications protocol at the transport layer that provides public key encryption (RSA or Diffie-Helman) - data encryption (IDEA - DES - 3DES) - server authentication - message integrity (MD5 or SHA-1) - and client authentication.






43. SHA-1 - MD2/ MD4 - MD5 - Fasthash - Triple DES-MAC - Tiger - and RIPEMD-160






44. Provides digests in different lengths including 224 - 256 - 384 - and 512






45. Art of hiding communications - i.e. hide information in graphic files - sound files - or slack space.






46. Encryption standard broken in 1998 - has a relatively short key length






47. A secure cryptoprocessor embedded in the motherboard used to authenticate a hardware device - TPM stands for






48. Most efficient algorithm - used for smart cards and cell phones - provides digital signatures - secure key exchange - and encryption






49. Uses symmetric key for integrity and confidentiality (bulk transaction) and asymmetric key for authentication - nonrepudiation - and key exchange






50. Altering the form of a message to disguise its meaning