Data Security Test Preparation
Course Introduction
Data Security is an essential course that explores the principles, methodologies, and technologies used to protect digital information throughout its lifecycle. Students will examine key concepts such as encryption, access controls, authentication mechanisms, security policies, and risk management strategies for safeguarding data from unauthorized access, breaches, and other cyber threats. The course also covers legal, ethical, and regulatory considerations surrounding data protection and privacy, as well as real-world applications such as secure data storage, transmission, and cloud security. Through hands-on exercises and case studies, students will develop the skills necessary to design and implement robust data security solutions in various organizational settings.
Recommended Textbook
Cryptography and Network Security 6th Edition by William Stallings
Available Study Resources on Quizplus 20 Chapters
842 Verified Questions
842 Flashcards
Source URL: https://quizplus.com/study-set/3983 Page 2
Chapter 1: Overview
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80023
Sample Questions
Q1) Authentication protocols and encryption algorithms are examples of security mechanisms.
A)True
B)False
Answer: True
Q2) A ___________ is any process,or a device incorporating such a process,that is designed to detect,prevent,or recover from a security attack.Examples are encryption algorithms,digital signatures and authentication protocols.
Answer: security mechanism
Q3) The three concepts that form what is often referred to as the CIA triad are ________ .These three concepts embody the fundamental security objectives for both data and for information and computing services.
A)confidentiality,integrity and availability
B)communication,integrity and authentication
C)confidentiality,integrity,access control
D)communication,information and authenticity
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Classical Encryption Techniques
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80022
Sample Questions
Q1) A scheme known as a one-time pad is unbreakable because it produces random output that bears no statistical relationship to the plaintext.
A)True
B)False
Answer: True
Q2) Ciphertext generated using a computationally secure encryption scheme is impossible for an opponent to decrypt simply because the required information is not there.
A)True
B)False
Answer: False
Q3) The two types of attack on an encryption algorithm are cryptanalysis based on properties of the encryption algorithm,and _________ which involves trying all possible keys.
Answer: brute-force
Q4) An encryption scheme is __________ secure if the ciphertext generated by the scheme does not contain enough information to determine uniquely the corresponding plaintext,no matter how much ciphertext is available.
Answer: unconditionally
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Block Ciphers and the Data Encryption Standard
Available Study Resources on Quizplus for this Chatper
27 Verified Questions
27 Flashcards
Source URL: https://quizplus.com/quiz/80021
Sample Questions
Q1) The key schedule algorithm is more popular and has received more attention than S-box design.
A)True
B)False
Answer: False
Q2) The ________ cipher structure,which dates back over a quarter century and which,in turn,is based on Shannon's proposal of 1945,is the structure used by many significant symmetric block ciphers currently in use.
Answer: Feistel
Q3) Two alternatives to DES are AES and _________ DES.
Answer: triple
Q4) Confusion seeks to make the statistical relationship between the plaintext and ciphertext as complex as possible in order to thwart attempts to deduce the key.
A)True
B)False
Answer: False
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Basic Concepts in Number Theory and Finite
Fields
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80020
Sample Questions
Q1) The polynomial cx)is said to be the __________ of ax)and bx)if cx)divides both ax)and bx)and any divisor of ax)and bx)is a divisor of cx).
Q2) Cryptographic algorithms do not rely on properties of finite fields.
A)True
B)False
Q3) Finite fields play a crucial role in several areas of cryptography.
A)True
B)False
Q4) A polynomial fx)over a field F is called __________ if and only if fx)cannot be expressed as a product of two polynomials,both over F,and both of degree lower than that of fx).
Q5) Polynomial arithmetic includes the operations of addition, subtraction and multiplication.
A)True
B)False
Q6) As a congruence relation,mod expresses that two arguments have the same remainder with respect to a given modulus.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Advanced Encryption Standard
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80019
Sample Questions
Q1) The ordering of bytes within a matrix is by column.
A)True
B)False
Q2) The four separate functions of the Advanced Encryption Standard are: permutation,arithmetic operations over a finite field,XOR with a key,and __________ .
Q3) In Advanced Encryption Standard all operations are performed on __________ bytes.
A)8-bit
B)16-bit
C)32-bit
D)4-bit
Q4) The encryption round has the structure:
A)ShiftRows,MixColumns,SubBytes,InvMixColumns
B)SubBytes,ShiftRows,MixColumns,AddRoundKey
C)MixColumns,ShiftRows,SubBytes,AddRoundKey
D)InvShiftRows,InvSubBytes,AddRoundKey,InvMixColumns
Q5) The nonlinearity of the S-box is due to the use of the multiplicative inverse.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Block Cipher Operation
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80018
Sample Questions
Q1) Once the plaintext is converted to ciphertext using the encryption algorithm the plaintext is then used as input and the algorithm is applied again.
A)True
B)False
Q2) Five modes of operation have been standardized by NIST for use with symmetric block ciphers such as DES and AES: electronic codebook mode,cipher block chaining mode,cipher feedback mode,__________,and counter mode.
Q3) The simplest mode of operation is the ___________ mode,in which plaintext is handled one block at a time and each block of plaintext is encrypted using the same key.
Q4) The __________ mode operates on full blocks of plaintext and ciphertext,as opposed to an s-bit subset.
A)CBC
B)ECB
C)OFB
D)CFB
Q5) The _________ must be a data block that is unique to each execution of the encryption operation and may be a counter,a timestamp,or a message number.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Random and Pseudorandom Number
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80017
Sample Questions
Q1) An algorithm that is used to produce an open-ended sequence of bits is referred to as a ___________ .
Q2) If the PRF does not generate effectively random 128-bit output values it may be possible for an adversary to narrow the possibilities and successfully use a brute force attack.
A)True
B)False
Q3) Operating systems typically provide a built-in mechanism for generating random numbers.For example,__________ uses mouse and keyboard activity,disk I/O operations,and specific interrupts.
Q4) Examples of a pseudorandom function are decryption keys and nonces.
A)True
B)False
Q5) Two approaches that use a block cipher to build a PNRG and have gained widespread acceptance are:
A)CTR mode and CFB mode
B)CTR mode and OFB mode
C)CBC mode and CFB mode
D)OFB mode and ECB mode
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: More Number Theory
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80016
Sample Questions
Q1) All integers have primitive roots.
A)True
B)False
Q2) The primitive roots for the prime number 19 are 2,3,10,13,14 and 15.
A)True
B)False
Q3) The logarithm of a number is defined to be the power to which some positive base except 1)must be raised in order to equal the number.
A)True
B)False
Q4) Discrete logarithms are fundamental to the ____________ .
A)Euler algorithm
B)digital signature algorithm
C)Miller-Rabin algorithm
D)Rijndael algorithm
Q5) The number 37 is prime so therefore all of the positive integers from 1 to 36 are relatively prime to 37.
A)True
B)False
Q6) Two numbers are __________ if their greatest common divisor is 1.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Public-Key Cryptography and Rsa
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80015
Sample Questions
Q1) Plaintext is recovered from the ciphertext using the paired key and a
A)digital signature
B)recovery encryption
C)decryption algorithm
D)encryption algorithm
Q2) A public-key encryption scheme is not vulnerable to a brute-force attack.
A)True
B)False
Q3) __________ depend on the running time of the decryption algorithm.
A)Mathematical attacks
B)Timing attacks
C)Chosen ciphertext attacks
D)Brute-force attacks
Q4) Plaintext is transformed into ciphertext using two keys and a decryption algorithm. A)True
B)False
Q5) To counter attacks such as CCAs,RSA Security,Inc. recommends modifying the plaintext using a procedure known as ___________ .
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Other Public-Key Cryptosystems
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80014
Sample Questions
Q1) For cryptography the variables and coefficients are restricted to elements in a __________ field.
A)primitive
B)infinite
C)public
D)finite
Q2) We use a cubic equation in which the variables and coefficients all take on values in the set of integers from 0 through p - 1 and in which calculations are performed modulo p for a __________ over Zp.
Q3) A considerably larger key size can be used for ECC compared to RSA.
A)True
B)False
Q4) The __________ key exchange involves multiplying pairs of nonzero integers modulo a prime number q.Keys are generated by exponentiation over the group with exponentiation defined as repeated multiplication.
A)Diffie-Hellman
B)Rabin-Miller
C)Micali-Schnorr
D)ElGamal
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Cryptographic Hash Functions
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80013
Sample Questions
Q1) It can be shown that some form of birthday attack will succeed against any hash scheme involving the use of cipher block chaining without a secret key,provided that either the resulting hash code is small enough or that a larger hash code can be decomposed into independent subcodes.
A)True
B)False
Q2) The two categories of attacks on hash functions are __________ attacks and cryptanalysis.
Q3) Limited characteristics make it impossible for hash functions to be used to determine whether or not data has changed.
A)True
B)False
Q4) Hash functions are commonly used to create a one-way password file.
A)True
B)False
Q5) When a hash function is used to provide message authentication,the hash function value is often referred to as a ___________ .
Q6) A __________ is an attack based on weaknesses in a particular cryptographic algorithm.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Message Authentication Codes
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80012
Sample Questions
Q1) The straightforward use of public-key encryption provides confidentiality and authentication.
A)True
B)False
Q2) A __________ takes a variable length message and a secret key as input and produces an authentication code.
Q3) Message authentication is a mechanism or service used to verify the integrity of a message.
A)True
B)False
Q4) The security of any MAC function based on an embedded hash function depends in some way on the cryptographic strength of the underlying hash function.
A)True
B)False
Q5) A __________ is an algorithm that requires the use of a secret key.
A)DAA
B)SHA
C)GCM
D)MAC
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Digital Signatures
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80011
Sample Questions
Q1) A digital signature can guarantee the integrity but not the source of the message.
A)True
B)False
Q2) The first part of the Schnorr digital signature scheme is the generation of a private/public key pair.
A)True
B)False
Q3) The __________ attack is where the attacker chooses a list of messages before attempting to break the user's signature scheme,independent of the user's public key.The attacker then obtains from the user valid signatures for the chosen messages.
Q4) _________ specifies that if the signature generation process results in a value of s = 0 a new value of k should be generated and the signature should be recalculated.
Q5) The Schnorr signature scheme is based on discrete logarithms.
A)True
B)False
Q6) A _________ is an authentication mechanism that enables the creator of a message to attach a code that acts as a signature.
To view all questions and flashcards with answers, click on the resource link above.
Page 15
Chapter 14: Key Management and Distribution
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80010
Sample Questions
Q1) A __________ defines the procedures needed to revoke digital certificates.
A)KDC
B)digital key
C)cryptographic key encryption
D)public key infrastructure
Q2) A __________ consists of a public key,an identifier of the key owner,and the whole block signed by a trusted third party and can be used by participants to exchange keys without contacting a public key authority in a way that is as reliable as if the keys were obtained directly from a public key authority.
Q3) The topics of cryptographic key management and cryptographic key distribution are complex,involving cryptographic,protocol, and management considerations.
A)True
B)False
Q4) X.509 defines the format for private-key certificates.
A)True
B)False
Q5) Used in a variety of applications,__________ defines the format for public-key certificates.
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 15: User Authentication Protocols
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80009
Sample Questions
Q1) A concept dealing with the use of a common identity management scheme across multiple enterprises and numerous applications and refers to the agreements,standards,and technologies that enable the portability of identities,identity attributes,and entitlements across multiple enterprises and numerous applications and supporting many thousands,even millions,of users is _________ .
Q2) To convince the server that a user is authentic,the authentication server creates a _________ that contains the user's ID and network address and the server's ID and sends it back to the client so they can continue the request for service.
Q3) _________ protocols enable communicating parties to satisfy themselves mutually about each other's identity and to exchange session keys.
Q4) The principal underlying standard for federated identity is the __________ which defines the exchange of security information between online business partners.
A)OSAIS
B)SAML
C)RBAC
D)SFIL
To view all questions and flashcards with answers, click on the resource link above.
Chapter 16: Network Access Control and Cloud Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80008
Sample Questions
Q1) EAPOL operates at the network layers and makes use of an IEEE 802 LAN,such as Ethernet or Wi-Fi,at the link level.
A)True
B)False
Q2) A __________ provides a form of NAC by allowing or denying network traffic between an enterprise host and an external user.
Q3) In effect,________ is an operating system in the cloud.
A)IEEE 802.1X
B)PaaS
C)IaaS
D)DHCP
Q4) The Cloud Security Alliance defines _______ as the provision of security applications and services via the cloud either to cloud-based infrastructure and software or from the cloud to the customers' on-premise systems.
Q5) ___________ includes people,processes,and systems that are used to manage access to enterprise resources by assuring that the identity of an entity is verified,and then granting the correct level of access based on this assured identity.
Q6) __________ are third party audits of cloud services.
To view all questions and flashcards with answers, click on the resource link above. Page 18
Chapter 17: Transport-Level Security
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80007
Sample Questions
Q1) One way to classify Web security threats is in terms of the location of the threat: Web server,Web browser,and network traffic between browser and server.
A)True
B)False
Q2) The __________ approach is vulnerable to man-in-the-middle attacks.
A)Anonymous Diffie-Hellman
B)Fixed Diffie-Hellman
C)Fortezza
D)Ephemeral Diffie-Hellman
Q3) With each element of the list defining both a key exchange algorithm and a CipherSpec,the list that contains the combination of cryptographic algorithms supported by the client in decreasing order of preference is the __________ .
A)CipherSuite
B)Random
C)Session ID
D)Version
Q4) A signature is created by taking the hash of a message and encrypting it with the sender's _________ .
To view all questions and flashcards with answers, click on the resource link above.
19
Chapter 18: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80006
Sample Questions
Q1) The principal threats to wireless transmission are eavesdropping, altering or inserting messages,and disruption.
A)True
B)False
Q2) The _________ is used to ensure the confidentiality of the GTK and other key material in the 4-Way Handshake.
A)MIC key
B)EAPOL-KEK
C)EAPOL-KCK
D)TK
Q3) Security policies for mobile devices should assume that any mobile device will not be stolen or accessed by a malicious party.
A)True
B)False
Q4) Sensors and robots,are not vulnerable to physical attacks.
A)True
B)False
Q5) The MPDU authentication phase consists of three phases.They are: connect to AS,EAP exchange and _________ .
To view all questions and flashcards with answers, click on the resource link above. Page 20
Chapter 19: Electronic Mail Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80005
Sample Questions
Q1) The __________ enables the recipient to determine if the correct public key was used to decrypt the message digest for authentication.
A)key ID of the sender's public key
B)timestamp
C)filename
D)leading two octets of message digest
Q2) Key IDs are critical to the operation of PGP and __________ key IDs are included in any PGP message that provides both confidentiality and authentication.
A)two
B)four
C)six
D)three
Q3) S/MIME cryptographic algorithms use __________ to specify requirement level.
A)CAN and MUST
B)SHOULD and CAN
C)SHOULD and MIGHT
D)SHOULD and MUST
Q4) S/MIME provides the following functions: enveloped data,signed data,clear signed data,and ________ .
To view all questions and flashcards with answers, click on the resource link above. Page 21
Chapter 20: Ip Security
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80004
Sample Questions
Q1) A value chosen by the responder to identify a unique IKE SA is a _________ .
A)Initiator SPI
B)Responder Cookie
C)Flag
D)Message ID
Q2) The __________ facility is concerned with the secure exchange of keys.
Q3) An end user whose system is equipped with IP security protocols can make a local call to an ISP and gain secure access to a company network.
A)True
B)False
Q4) IP security is a capability that can be added to either current version of the Internet Protocol by means of additional headers.
A)True
B)False
Q5) Authentication applied to the entire original IP packet is _________ .
A)security mode
B)cipher mode
C)tunnel mode
D)transport mode
To view all questions and flashcards with answers, click on the resource link above. Page 22