The SSCP Prep Guide: Mastering the Seven Key Areas of System Security

Debra S. Isaac, Michael J. Isaac

Chapter 6 Domain 5: Cryptography - all with Video Answers

Educators

Chapter Questions

Problem 1

A strong hash function, $\mathrm{H}$, and its output message digest, $\mathrm{MD}$, have which of the following characteristics relative to a message, $\mathrm{M}$, and another message, $\mathrm{Ml}$ ?
a. $H(M)=M D$, where $M$ is of fixed length and $M D$ is of fixed length
b. $H(M)=M D$, where $M$ is of variable length and $M D$ is of fixed length
c. $\mathrm{H}(\mathrm{M})=\mathrm{H}(\mathrm{M} 1)$
d. $H(M)=M D$ where $M$ is of variable length and $M D$ is of variable length

Check back soon!

03:43

Problem 2

The Secure Hash Algorithm (SHA) is specified in the:
a. Data Encryption Standard
b. Digital Signature Standard
c. Digital Encryption Standard
d. Advanced Encryption Standard

Samriddhi Singh

Numerade Educator

Problem 3

What are MD4 and MD5?
a. Symmetric encryption algorithms
b. Asymmetric encryption algorithms
c. Hashing algorithms
d. Digital certificates

Check back soon!

00:59

Problem 4

What is the block length of the Rijndael cipher?
a. 64 bits
b. 128 bits
c. Variable
d. 256 bits

James Kiss

Numerade Educator

00:59

Problem 5

What is the key length of the Rijndael block cipher?
a. 56 or 64 bits
b. 512 bits
c. 128,192 , or 256 bits
d. 512 or 1024 bits

James Kiss

Numerade Educator

Problem 6

The hashing algorithm in the Digital Signature Standard (DSS) generates a message digest of:
a. 120 bits
b. 160 bits
c. 56 bits
d. 130 bit

Check back soon!

Problem 7

The Wireless Application Protocol (WAP) analog of SSL in the TCP/IP protocol is:
a. Wireless Transport Layer Security Protocol (WTLS)
b. Wireless Session Protocol (WSP)
c. Wireless Transaction Protocol (WTP)
d. Wireless Application Environment (WAE)

Check back soon!

Problem 8

Components of an IPSec Security Association (SA) are:
a. Sockets security parameter and destination IP address
b. Authentication Header (AH) and source IP address
c. Security parameter index and destination address
d. Security Parameter Index (SPI), Authentication Header (AH) or the Encapsulation Security Payload (ESP), and the destination IP address

Check back soon!

01:16

Problem 9

Key clustering is:
a. The identification of weak keys in symmetric key algorithms
b. When two different keys encrypt a plain-text message into the same ciphertext
c. When one key encrypts a plain-text message into different ciphertexts when the key is applied at different times
d. When one key in a keyed hash function generates different message digests when applied at different times

Vysakh M

Numerade Educator

01:14

Problem 10

The following table describes what cryptographic function?
$$
\begin{array}{cl}
\text { INPUTS } & \text { OUTPUT } \\
\hline 00 & 0 \\
\hline 01 & 1 \\
\hline 10 & 1 \\
\hline 11 & 0 \\
\hline
\end{array}
$$
a. Hash
b. Keyed hash
c. Exclusive OR (XOR)
d. OR

Ajay Singhal

Numerade Educator

01:37

Problem 11

In a block cipher, diffusion:
a. Conceals the connection between the ciphertext and plain text
b. Spreads the influence of a plain-text character over many ciphertext characters
c. Is usually implemented by non-linear $\mathrm{S}$ boxes
d. Cannot be accomplished

Samriddhi Singh

Numerade Educator

00:34

Problem 12

The hard, one-way function that characterizes the elliptic curve algorithm is:
a. Finding the prime factors of very large numbers
b. The discrete logarithm problem
c. RSA
d. The knapsack problem

Amy Jiang

Numerade Educator

01:40

Problem 13

What does the Secure Sockets Layer (SSL)/Transaction Security Layer (TSL) do?
a. Implements confidentiality, authentication, and integrity above the transport layer
b. Implements confidentiality, authentication, and integrity below the transport layer
c. Implements only confidentiality above the transport layer
d. Implements only confidentiality below the transport layer

Vysakh M

Numerade Educator

Problem 14

The Skipjack algorithm is used in:
a. PGP
b. The Clipper Chip
c. DSS
d. AES

Check back soon!

03:43

Problem 15

In most security protocols that support authentication, integrity, and confidentiality,
a. AES is used to create digital signatures.
b. Private-key cryptography is used to create digital signatures.
c. DES is used to create digital signatures.
d. Public-key cryptography is used to create digital signatures.

Samriddhi Singh

Numerade Educator

Problem 16

Which of the following is an example of a symmetric key algorithm?
a. Rijndael
b. RSA
c. Diffie-Hellman
d. Knapsack

Check back soon!

Problem 17

A polyalphabetic cipher is also known as a:
a. One-time pad
b. Vigenère cipher
c. Steganography
d. Vernam cipher

Check back soon!

Problem 18

Which of the following is NOT a characteristic of a symmetric key algorithm?
a. Secure distribution of the secret key is a problem.
b. Most algorithms are available for public scrutiny.
c. Work factor is a function of the key size.
d. Is slower than asymmetric key encryption.

Check back soon!

Problem 19

Which of the following is an example of an asymmetric key algorithm?
a. IDEA
b. DES
c. 3 DES
d. Elliptic curve

Check back soon!

Problem 20

Microdots, invisible ink, and hiding information in digital images is called:
a. Hybrid cryptography
b. Diffusion
c. Steganography
d. Confusion

Check back soon!

Problem 21

The classic Caesar cipher is a:
a. Polyalphabetic cipher
b. Monoalphabetic cipher
c. Transposition cipher
d. Code group

Check back soon!

01:37

Problem 22

The modes of DES do NOT include:
a. Electronic Code Book
b. Cipher Block Chaining
c. Variable Block Feedback
d. Output Feedback

Samriddhi Singh

Numerade Educator

Problem 23

The Rijndael Algorithm is also known as the:
a. Advanced Encryption Standard (AES)
b. Data Encryption Standard (DES)
c. Digital Signature Algorithm (DSA)
d. IDEA algorithm

Check back soon!

11:17

Problem 24

Which of the following is true?
a. The work factor of triple DES is the same as for double DES.
b. The work factor of single DES is the same as for triple DES.
c. The work factor of double DES is the same as for single DES.
d. No successful attacks have been reported against double DES.

Willis James

Numerade Educator

Problem 25

In public-key cryptography,
a. Only the private key can encrypt and only the public key can decrypt.
b. Only the public key can encrypt and only the private key can decrypt.
c. The public key is used to encrypt and decrypt.
d. If the public key encrypts, then only the private key can decrypt.

Check back soon!

Problem 26

Which of the following characteristics does a one-time pad have if used properly?
a. It can be used more than once.
b. The key does not have to be random.
c. It is unbreakable.
d. The key has to be of greater length than the message to be encrypted.

Check back soon!

Problem 27

The Clipper Chip is described by which of the following:
a. The National Security Standard
b. The Escrowed Encryption Standard
c. Fair Public-Key Cryptosystem
d. Advanced Encryption Standard

Check back soon!

Problem 28

In a digitally signed message transmission using a hash function,
a. The message digest is encrypted in the private key of the sender.
b. The message digest is encrypted in the public key of the sender.
c. The message is encrypted in the private key of the sender.
d. The message is encrypted in the public key of the sender.

Check back soon!

Problem 29

A ciphertext attack where the selection of the portions of ciphertext for the attempted decryption is based on the results of previous attempts is known as:
a. Known plain text
b. Chosen ciphertext
c. Chosen plain text
d. Adaptive chosen ciphertext

Check back soon!

01:15

Problem 30

A trap door is which of the following?
a. A mechanism, usually in multilevel security systems, that limits the flow of classified information to one direction
b. A mechanism in a database system that restricts access to certain information within the database
c. A method of sending a secret key
d. A secret mechanism that enables the implementation of the reverse function in a one-way function

Ajay Singhal

Numerade Educator