Network Security (NETSEC) 3 Practice Test

These questions are part of the practice quiz. Start practicing

• Companies transmit over the wireless LANs because WLANs ________.
• Which protocol is almost always used to protect VPN transmissions during online purchases?
• Which of the following is NOT described as a VPN type in the material?
• Which technology offers transparent protection?
• Remote access VPNs typically use VPN gateways.
• To ensure that a digital certificate is valid, the receiver of the certificate must check ________.
• Which of the following is a type of VPN?
• Which types of VPNs use VPN gateways?
• Packaged sets of cryptographic countermeasures for protecting data transmission are ________.
• An IPsec security association provides which of the following for IP packets?
• What does VPN stand for in this context?
• One of the core effective key lengths listed for 3DES is 112 bits.
• Which security property ensures data is accessible only to authorized users?
• ________ offers transparent protection.
• SSL/TLS is used for ________ VPNs.
• In public-key encryption for confidentiality, can the sender who encrypted the message decrypt it afterwards?
• Security through obscurity is generally discouraged because it relies on secrecy of the encryption method.
• Quantum key distribution is described as delivering enormously long keys to communication partners.
• Which statement correctly describes the role of the CA's digital signature in a certificate?
• Which statement about IPsec tunnel mode is correct?
• SSL/TLS is used for remote access VPNs.
• Which of the following is one of the key lengths offered by AES?
• Policy enforcement can be applied to which of the following in a typical network security architecture?
• Which of the following is the best method to thwart exhaustive searches by cryptanalysts?
• When two parties communicate with symmetric key encryption, how many keys are used in total to encrypt and decrypt?
• In IPsec, how are cryptographic algorithms chosen for an SA?
• HMACs are said to provide protection primarily for which property?
• Which of the following best describes a cipher suite?
• Digital signatures provide which combination of properties?
• In public-key encryption for confidentiality, which statement is true?
• In public key encryption for authentication, the verifier decrypts the ciphertext with the supplicant's public key.
• During certificate validation, which component, created by the CA, is used to confirm the certificate's authenticity?
• Companies transmit over the Internet because the Internet ________.
• Public key encryption is ________.
• In public-key encryption for authentication, the supplicant uses ________ to encrypt.
• When Carol sends a message to Bob, Bob will use ________ to decrypt the message.
• Which element does a digital certificate directly provide to others?
• The public key is intended to be shared openly, while the private key is kept secret.
• In authentication, which entity is responsible for verifying the claimed identity?
• Between two sites, what is the primary purpose of setting up IPsec VPNs?
• Which statement about mutual authentication is true?
• IPsec operates at the ________ layer.
• Most message-by-message authentication methods provide message integrity as a by-product.
• Which term refers to the science of protecting information by transforming it into an unreadable form?
• What operation in public-key authentication is used by the supplicant to prove identity?
• Which IPsec mode is commonly used for site-to-site VPNs?
• When both parties prove their identities to the other, this is called
• SSL/TLS typically provides security for which scope?
• To be considered strong today, a symmetric encryption key must be at least how many bits long?
• Which statement about proofs of identity best reflects the material?
• Which of the following statements about 56-bit key size is true according to the material?
• SSL/TLS protection is transparent to applications.
• An attack where an adversary intercepts an encrypted message and transmits it again later is called a ________.
• Which of the following is a direct target for policy enforcement in the context of the source material?
• Which of the following items is not typically found in a digital certificate?
• The statement 'The verifier uses the sender's public key to test the digital signature' is true.
• In the described scenario, Emma uses the recipient's public key to encrypt the message.
• Which hash function has a 256-bit output according to the material?
• Which of the following best describes the relationship between the public key and private key in RSA?
• When Joshua sends a message to Larry, Joshua will use ________ to encrypt the message.
• Which of the following is one of the effective key lengths in 3DES?
• Which revocation checking method involves querying the issuer for the status of a single certificate?
• Strong RSA keys are at least ________ bits long.
• Proving your identity to a communication partner is called
• In public-key cryptography, which pair of operations is typically used?
• Is it possible to exchange a symmetric session key securely using public-key encryption?
• A ________ is a cryptographic system that provides secure communication over an untrusted network.
• When you make a purchase over the Internet, your sensitive traffic is almost always protected by ________ VPN transmission.
• For message-by-message authentication, does each message need an electronic signature?
• SSL/TLS can be used for host-to-host VPNs.
• ______ ciphers move letters around within a message but characters are not substituted.
• SHA-256 produces a hash of how many bits?
• In Diffie-Hellman key agreement, can the attacker who captures the keying information compute the symmetric session key?
• Which cryptographic operation provides authentication in public-key cryptography?
• SSL/TLS operates at the ________ layer.
• To meet national export limitation in many countries, RC4 often uses a key length of ________ bits.
• In public key encryption for authentication, the verifier decrypts the ciphertext with the verifier's public key.
• Which statement reflects RC4 export-limited practice?
• Cryptanalysts have found weaknesses in which hash algorithm?
• DES uses block encryption.
• A remote access VPN typically gives users access to multiple resources within a site.
• Which cipher is often configured with a 40-bit export-limited key length?
• Which cipher is not a public-key cipher among the listed options?
• To achieve comparable security, public keys are typically longer than symmetric keys.
• Digital signatures provide which of the following?
• A DES key is ________ bits long.
• IPsec operates at which layer of the OSI model to secure traffic?
• SHA-1 hash size is 160 bits.
• Using new and proprietary encryption ciphers is a good idea because cryptanalysts will not know them.
• In cryptographic handshakes, the negotiation of security methods and options occurs during which stage?
• IPsec security associations are unidirectional by design; to protect traffic in both directions you need multiple SAs.
• The first task in establishing a cryptographic system is selecting a cryptographic system standard for the dialogue.
• Site-to-site VPNs typically decrypt messages when they arrive from the outside.
• SSL/TLS was developed for remote access VPNs.
• SSL/TLS was developed for ________ VPNs.
• ________ thwart replay attacks by ensuring 'freshness' using cutoff values.
• Nonces are described as usable in which type of applications according to the material?
• ______ ciphers leave letters in their original positions.
• In authentication, the party trying to provide its identity to the other party is called the
• In public key encryption, the sender uses the recipient's public key for which purpose in public key encryption?
• The statement 'Nearly all encryption for confidentiality uses symmetric key encryption ciphers' is true.
• It is OK for a verifier to receive digital certificates from the sender.
• Someone who breaks encryption is called a ________.
• In SSL/TLS, a ________ is a specific set of security methods and options.
• Which of the following layers does IPsec protect?
• Signing a message digest means encrypting it with the sender's public key.
• Most CAs are not regulated.
• Which encryption method does MS-CHAP use?
• To test the digital signature, the verifier will use sender's public key.
• What is the role of IKE in IPsec?
• In public key encryption for authentication, the receiver decrypts with the sender's public key.
• HMACs provide cryptographic protection of which attribute?
• Which stage is typically the longest in a cryptographic system dialogue?
• Hash outputs produced by a hashing algorithm are always fixed in length.
• Quantum key cracking ________.
• IPsec SAs can be renegotiated or renewed at intervals. Which option best describes this?
• ________ occurs when companies believe they have good security because they are using proprietary ciphers that hackers do not know.
• During signature verification, which step helps confirm the signature validity?
• Which of the following is a direct target for policy enforcement among security controls?
• In public key encryption, 'signing' is the act of ________.
• DES is a block cipher.
• The statement 'In a replay attack, the attacker cannot read the contents of the replayed message' is true.
• The statement 'A DES key is 40 bits long' is
• In an IPsec connection between two parties, how many security associations are typically used to cover bidirectional traffic?
• Which of the following is transmitted across a network?
• A digital certificate ________.
• The most popular public key encryption cipher is ________.
• Nearly all encryption for confidentiality uses which type of encryption ciphers?
• MS-CHAP is used for which type of authentication?
• In a cryptographic handshake, which stage is responsible for generating and distributing cryptographic keys?
• Which technique is NOT listed as a method to thwart replay attacks in the material?
• Which measure do HMACs use?
• Which statement about RC4's key lengths is accurate?
• Which of the following statements accurately describes RC4?
• Digital signatures are used for which type of authentication?
• MS-CHAP is used for initial authentication.
• The MD-5 hash size is 160 bits.
• The person the supplicant claims to be is the true party.
• The most popular public key cipher is RSA.
• A person who pretends to be someone else is
• DES key length is commonly 56 bits.
• Which fields are contained on a digital certificate?
• Which hash function has a 160-bit output according to the material?
• A commonly SSL/TLS-aware application is ________.
• IPsec operates at the internet layer.
• What term refers to proofs of identity?
• Which algorithm has known weaknesses according to cryptanalysis?
• SSL/TLS was developed for which type of VPNs?
• HMACs provide cryptographic protection of which properties?
• Electronic signatures usually provide
• Quantum key distribution ________.
• A digital ________, by itself, provides authentication.
• Replay attacks can be thwarted by using ________.
• A ________ is a mathematical process used in encryption and decryption.
• Digital signatures typically provide
• How is the message digest created by the supplicant?
• In checking the digital signature, the verifier ________.
• If a key is 43 bits long, how much longer will it take to crack it by exhaustive search if extended to 50 bits?
• Nonces can be used in ________.
• In MS-CHAP, the ________ creates the response message.
• MS-CHAP provides mutual authentication.
• The 56-bit key size ________.
• A ________ is a random string of 40 to 4,000 bits used to encrypt messages.
• To check a certificate's revocation status, the verifier can ________.
• Hashing is a reversible process.
• Which statement is true about RSA?
• How is a digital signature created by the supplicant?
• In codes, code symbols may represent ________.
• The use of mathematical operations to protect messages traveling between parties or stored on a computer.
• IPsec tunnel mode ________.
• Which of the following is NOT an effective key length in 3DES?
• In public key authentication, the supplicant must prove knowledge of which private key?
• Which technique is used to prove the user's identity in public-key authentication?
• Which type of cipher substitutes each symbol with another symbol?
• In SSL/TLS, a specific set of protocols that a particular cryptographic system will use to provide protection is called a ________.
• What is the direct result of checking a digital signature against the message?
• Which key does the signer use to encrypt the message digest to create the signature?
• What protection do message-by-message cryptographic systems provide?
• What is the primary goal of authentication?
• Mutual authentication ensures that
• HMACs rely on what cryptographic primitive to provide protection?
• ________ is efficient enough in processing power and RAM requirements to be used on small devices, such as PDAs and cell phones.
• Which statement about increasing key length on brute-force resistance is illustrated by extending from 43 to 50 bits?
• Hashing is ________.
• 3DES is ________.
• Which AES key length is explicitly cited as offered in the material?
• What security guarantee ensures that intercepted messages cannot be read?
• Which statement correctly contrasts IPsec and SSL/TLS in terms of the layer they secure?
• Which type of cipher rearranges the positions of characters without changing them?