CISSP Exam Quiz 11

Question 1 of 10

1. Question

John has been advised that any length of data that a client using a web browser inserts is approved by one of the applications introduced on a web server within the DMZ into the form the webserver gives to gather unused client information. Which of the taking after portrays an issue that John ought to be mindful of relating to this sort of vulnerability?

Application is written in the C programming language.
The program does not implement the Trusted Computing Foundation.
In-ring 3 of a ring-based architecture, the program is running.
The application is not interacting with the memory manager properly.

Question 2 of 10

2. Question

What is the objective of cryptanalysis?

To determine the strength of an algorithm
To increase the substitution functions in a cryptographic algorithm
To minimize the functions of transposition in a cryptographic algorithm
To determine the permutations used

Question 3 of 10

3. Question

Why has the frequency of fruitful brute-force attacks increased?

In algorithms, the use of permutations and transpositions has risen.
They get less complex as algorithms get stronger, and thus more susceptible to attacks.
Processor speed and power have increased.
Key length reduces over time.

Question 4 of 10

4. Question

Which of the following isn’t a property or characteristic of a one-way hash function?

It converts a message of arbitrary length into a value of fixed length.
Given the digest value, finding the appropriate message should be computationally infeasible.
Two separate messages should make it difficult or unusual to derive the same list.
It transforms a fixed-length message to a value of an arbitrary length.

Question 5 of 10

5. Question

What would show that a message had been modified?

The public key has been altered.
The private key has been altered.
The message digest has been altered.
The message has been encrypted properly.

Question 6 of 10

6. Question

Which of the following may be a U.S. federal government calculation created for creating secure message digests?

Data Encryption Algorithm (DEA).
Digital Signature Standard (DSS).
Secure Hash Algorithm (SHA).
Data Signature Algorithm (DSA).

Question 7 of 10

7. Question

Which alternative best portrays the distinction between HMAC and CBC-MAC?

HMAC produces a message digest and is used for integrity; for confidentiality, CBC-MAC is used to encrypt blocks of data.
Asymmetric key and a hashing algorithm are used by HMAC; the first block for the checksum is used by CBC-MAC.
HMAC offers authentication of legitimacy and data origin; CBC-MAC uses a block cipher for the process of building a MAC.
With asymmetric key, HMAC encrypts a message and then puts the result through a hashing algorithm; the entire message is encrypted by CBC-MAC.

Question 8 of 10

8. Question

What is an advantage of RSA over DSA?

It can provide a digital signature and encryption functionality.
Since it uses symmetric keys, it uses fewer resources and encrypts quicker.
Rather than a stream cipher, it is a block cipher.
It employs a one-time encryption pad

Question 9 of 10

9. Question

What is utilized to create a digital signature?

The receiver’s private key
The sender’s public key
The sender’s private key
The receiver’s public key

Question 10 of 10

10. Question

Which of the following is best depicts an advanced signature?

A process by which a handwritten signature is moved to an electronic record
A method to encrypt confidential information
A process for supplying an electronic signature and encryption
A way to prove the source and integrity of a message to the recipient of the message

CISSP Exam Quiz 11

Quiz-summary

Information

Results

Categories