7. Encryption, Privacy, and Trust Online Quiz Questions

Which description best explains symmetric encryption?

What standard term names the fixed-length value produced when a cryptographic hash function processes input?

Which two choices are different authentication-factor categories that could satisfy the category requirement for multifactor authentication? Select all correct choices.

What is a primary security function of a digital signature?

What protocol, commonly used by HTTPS, negotiates cryptographic algorithms, authenticates the server through certificates, establishes session keys, and protects application data in transit?

Which two actions are legitimate parts of a cryptographic key-management life cycle? Select all correct choices.

After public-key operations authenticate participants and establish a temporary session key, what typically protects the rest of a secure communication efficiently?

A government agency proposes a universal backdoor in an encrypted messaging system to obtain evidence. Evaluate this proposal using the material's framework for lawful access. What safeguards should apply, why does a universal backdoor create security concerns, and what alternatives might investigators consider?

Which distinction correctly describes authentication and authorization?

What type of encryption uses the same secret key to encrypt and decrypt data?

A software publisher posts a file hash, but a user's computed hash does not match it. What is the most appropriate conclusion?

True or false: Authorization determines which actions an authenticated entity is permitted to perform.

How many authentication-factor categories are described in the material? Enter the number as a whole number.

Alice wants to send Bob a confidential message using asymmetric cryptography. Which key should Alice use to encrypt the message?

True or false: A digital signature by itself provides confidentiality for the signed information.

What is the full term for the trusted entity that signs a certificate binding a website identity to a public key?

Which actions are part of responsible cryptographic key management? Select all that apply.

What is the full name of TLS, the protocol used by HTTPS to help protect web communications?

A school wants to reduce the risk from stolen passwords. Which change most directly follows the material's recommendation about stronger multifactor authentication?

True or false: In end-to-end encryption, a service provider may deliver ciphertext without possessing the key needed to read the message.

Why can adding a universal backdoor to an encrypted system create a security problem?

A company laptop is stolen while it is powered off. The laptop's storage is encrypted, but the thief may still possess the physical device. What protection does the encryption primarily provide in this situation?

A messaging system must protect large amounts of data efficiently, but two users have not previously shared a secret key. Which design best addresses both requirements?

A software publisher digitally signs an update, and users verify the signature with the publisher's public key. What can this process establish, assuming the publisher's private key remains secure?

An organization discovers that an employee's private signing key may have been copied by an attacker. Which key-management response is most appropriate?

True or false: Encrypting a message prevents an observer from learning that data was exchanged, when it was exchanged, or how much data was transferred.

True or false: A security measure that is so difficult that users routinely disable it or work around it may weaken practical security, so usable security matters.