Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Mod3 Practice Quiz
Security plus
| Term | Definition |
|---|---|
| wants to bolster security measures due to a rise in industrial espionage and the risk of physical theft of these devices. Which of the following encryption strategies would be the MOST effective? | Incorporate self-encrypting drives (SEDs) into its storage infrastructure |
| online store wants to secure transactions between the store and customers using a pair of public and private keys. Which cryptographic technique would BEST meet these requirements? | Asymmetric encryption |
| secure its data in all its states: at rest, in transit, and in use. This includes large volumes of data that it continuously transfers over the network. Which of the following schemes is the BEST approach to achieve with efficiency and security? | asymmetric and symmetric encryption |
| anonymous message containing a potential Pulitzer Prize-winning story. The sender requested the reporter set up a communication system that enforced encryption before sending over details for the story. What is the anonymous sender trying to ensure? | encryption allows for confidentiality |
| How might those certificates still appear valid, even though they should be on the Certificate Revocation List (CRL)? | the CA blocked companies from adding it to the CRL |
| Instead, it wants to ship an encrypted copy of the data to the vendor. What type of encryption would BEST fit the clinic’s needs? | symmetric algorithm |
| A small company needs to ensure it protects the SQL data against theft while in use. What type of encryption would BEST fit its needs? | database-level encryption |
| What BEST describes text that is not encrypted? | plaintext |
| However, after testing the website, an error message in the browser stated that the connection was insecure. What should the marketing firm purchase and set up so that the page shows that it is secure? | digital certificate |
| A small development company just set up a web server and must ensure a secure customer connection. Regarding digital certificates, what is a file containing the information that the subject wants to use in the certificate, including its public key? | CSR |
| after running a test on the website, an error message in the browser stated that the connection was insecure. What framework should the marketing firm use to ensure this error message does not show up? | public key infrastructure |
| A recent security flaw allowed a malicious actor to access sensitive data even though the data never left the server and there is full drive encryption. Which data state did the malicious actor MOST likely compromise? | in use |
| A company wants to establish a secure communication channel with its remote employees. . Which system can help the company meet its objectives? | digital certificates managed by a Certificate Authority (CA) |
| After resolving that issue, the consultant suggested the construction company enable computer encryption. Why might the company want to enable encryption on its computers' hard drives? | To prevent unauthorized access to data on a stolen device |
| What BEST describes why the CEO should approve the proposal instead of pushing back against it? | disk encryption protects stolen devices from data theft |
| Why might a company want a longer key length? | to decrease the chances of the ciphertext cracking |
| What is the process used to encrypt and decrypt a message? | algorithm |
| How can the consultant describe cryptographic hashing so the client is more likely to accept recommendations? | hashing produces a fixed-length string of bits(a hash) from an input plaintext that can be of any length |
| A multinational corporation is sending sensitive data to various regional offices securely. What is an optimal cryptographic method to employ in this situation? | symmetric encryption for data and asymmetric for key exchange |
| An organization wants to ensure the security of its sensitive data stored on the company's physical drives, with varying levels of access for different users. Which of the following encryption methods would BEST suit this requirement? | a combination of volume and file encryption |
| The developer must ensure that anyone using the browser is safe from invalid certificates. What should the developer use to ensure that the browser blocks revoked certificates? | CRL |
| high volume of images sent from the company networks to a popular gaming social media platform. After reviewing the images, the security engineer saw that the images were seemingly benign. Why might these images still be a threat? | they contain steganography |
| lost its reputation due to poor business practices. Its higher signing authority revoked the ability to issue new certificates, and browsers now show it as invalid. What describes the position that the company once had but has now lost? | Certificate Authority |
| After inspection, those devices do not have the correct component required for the drive encryption to function. Which security component would the company need to install for the drive encryption to work? | TPM |
| Currently, the network is set to open and allows any device to connect to it, even employees' personal devices. What encryption product would help the company secure its wireless networks? | Wi-Fi protected access |
| It needs something that can help future-proof its security while it grows. Which key exchange method would meet the needs of the enterprise? | Diffie-Hellman |
| A security engineer investigates the impacts of a recent breach in which a threat actor was able to exfiltrate company data. What cryptographic solution serves as a countermeasure that mitigates the impact of hash table attacks by adding a random value to | Salt |
Created by:
OliviaGarcia2412