CISSP Practice Questions – Domain 3: Security Architecture and Engineering

Table of Contents

Q1: Asymmetric Encryption Architecture

Which cryptographic methodology employs a paired key system where data encrypted with one mathematical key can only be decrypted using its corresponding counterpart?

A) Symmetric encryption
B) Asymmetric encryption ✓
C) Hashing functions
D) Steganographic techniques

Correct Answer: B

Justification:

✅ B is correct because asymmetric cryptography (public-key cryptography) uses a mathematically linked key pair: a public key for encryption and a private key for decryption. This eliminates the need for pre-shared secrets and enables secure key exchange, digital signatures, and non-repudiation.
❌ A is incorrect because symmetric encryption relies on a single shared secret key for both encryption and decryption, not a paired key system.
❌ C is incorrect because hashing functions are one-way mathematical operations designed to produce fixed-length digests for integrity verification; they do not encrypt or decrypt data.
❌ D is incorrect because steganography hides the existence of data within other media (e.g., images, audio) rather than encrypting it with key pairs.

Q2: Symmetric Encryption Fundamentals

What type of cryptographic approach utilizes a single shared secret value for both the encryption and decryption processes?

A) Asymmetric encryption
B) Symmetric encryption ✓
C) Hashing algorithms
D) Steganography methods

Correct Answer: B

Justification:

✅ B is correct because symmetric cryptography relies on one identical key shared between communicating parties to encrypt plaintext and decrypt ciphertext. This approach is computationally efficient and ideal for bulk data encryption.
❌ A is incorrect because asymmetric encryption uses two distinct but mathematically related keys (public and private), not a single shared secret.
❌ C is incorrect because hashing is a one-way transformation that produces a digest; it cannot reverse the process to decrypt data.
❌ D is incorrect because steganography conceals data within carriers without necessarily transforming its mathematical structure through encryption.

Q3: Security Architecture Objective

What is the primary objective when designing security architecture for enterprise information systems?

A) Creating resilient and secure system frameworks that embed security by design ✓
B) Implementing organizational security policies through administrative procedures
C) Conducting vulnerability identification exercises across deployed assets
D) Training personnel on security awareness and incident response protocols

Correct Answer: A

Justification:

✅ A is correct because security architecture focuses on engineering secure system structures, integrating controls at the design phase, and establishing frameworks (e.g., Zero Trust, defense-in-depth) that inherently protect assets while supporting business functions.
❌ B is incorrect because policy implementation falls under security governance and operations, not architectural design.
❌ C is incorrect because vulnerability identification is a testing/assessment activity (Domain 6), not an architectural design objective.
❌ D is incorrect because personnel training is an administrative/awareness function, not a technical architecture responsibility.

Q4: Hardware Security Module (HSM) Function

What is the principal function of a Hardware Security Module (HSM) within cryptographic infrastructure?

A) Securing network communication channels through protocol negotiation
B) Encrypting data stored on disk volumes using software-based algorithms
C) Authenticating user identities via biometric verification
D) Safeguarding and managing cryptographic key material in tamper-resistant hardware ✓

Correct Answer: D

Justification:

✅ D is correct because HSMs are dedicated, hardened physical devices designed to generate, store, protect, and manage cryptographic keys. They provide FIPS-validated secure environments, prevent key extraction, and accelerate cryptographic operations.
❌ A is incorrect because securing network channels is the role of protocols like TLS/IPsec, not HSMs.
❌ B is incorrect because disk encryption is handled by storage encryption solutions; HSMs may provide keys for these solutions but don’t perform the encryption themselves.
❌ C is incorrect because biometric authentication is managed by identity management systems and sensors, not cryptographic key management hardware.

Q5: Bell-LaPadula Security Model

Which formal security model primarily enforces data confidentiality through mandatory access control rules like “no read up” and “no write down”?

A) Biba integrity model
B) Bell-LaPadula model ✓
C) Clark-Wilson model
D) Brewer-Nash (Chinese Wall) model

Correct Answer: B

Justification:

✅ B is correct because the Bell-LaPadula model is strictly focused on confidentiality. It enforces the Simple Security Property (no read up) and the *-Property (no write down) to prevent unauthorized information flow from higher to lower classification levels.
❌ A is incorrect because the Biba model focuses on data integrity (“no read down,” “no write up”), which is the inverse of Bell-LaPadula’s confidentiality rules.
❌ C is incorrect because Clark-Wilson enforces integrity through well-formed transactions and separation of duties, not classification-based confidentiality.
❌ D is incorrect because Brewer-Nash prevents conflicts of interest in commercial environments, not confidentiality in classified systems.

Q6: Secure Password Storage Best Practice

According to CISSP best practices, what is the most critical consideration when implementing secure password storage mechanisms?

A) Utilizing simple hashing algorithms like MD5 for optimal performance
B) Storing password hashes in plaintext format for easier administration
C) Employing robust one-way hashing algorithms combined with unique salt values ✓
D) Permitting users to select weak passwords to reduce support overhead

Correct Answer: C

Justification:

✅ C is correct because strong one-way hashing (e.g., bcrypt, Argon2, SHA-256) combined with unique salts prevents rainbow table attacks and ensures identical passwords produce different hashes, significantly strengthening credential storage security.
❌ A is incorrect because MD5 is cryptographically broken and vulnerable to collision attacks; it should never be used for password storage.
❌ B is incorrect because storing hashes in plaintext contradicts secure storage principles; hashes should be protected in secured directories with strict access controls.
❌ D is incorrect because allowing weak passwords increases susceptibility to brute-force and dictionary attacks, directly undermining authentication security.

Q7: Side-Channel Attack Objective

What is the primary objective of side-channel attacks against cryptographic implementations?

A) Directly breaking encryption algorithms through mathematical analysis
B) Modifying encryption system configuration files to weaken security
C) Extracting key information by observing external physical characteristics of the system ✓
D) Performing exhaustive brute-force key searches across all possible values

Correct Answer: C

Justification:

✅ C is correct because side-channel attacks exploit unintended physical information leakage (e.g., power consumption, electromagnetic emissions, timing variations, acoustic signals) during cryptographic operations to deduce secret keys without breaking the underlying mathematics.
❌ A is incorrect because mathematical cryptanalysis targets the algorithm’s theoretical weaknesses, not physical implementation leakage.
❌ B is incorrect because configuration modification represents a configuration attack or sabotage, not a side-channel technique.
❌ D is incorrect because brute-force attacks systematically test all possible keys, whereas side-channel attacks use physical observations to drastically reduce the keyspace.

Q8: Public vs. Secret Algorithms

What is the main difference between public and secret cryptographic algorithms in modern security practice?

A) Public algorithms are inherently weaker than secret algorithms
B) Government agencies exclusively avoid using secret algorithms
C) Public algorithms undergo open peer review, while secret algorithms are withheld from public scrutiny ✓
D) Secret algorithms require larger development teams to remain secure

Correct Answer: C

Justification:

✅ C is correct because public algorithms (e.g., AES, RSA, SHA-2) are published for global peer review, enabling continuous validation and improvement. Secret algorithms (e.g., historical NSA ciphers) rely on obscurity, which contradicts Kerckhoffs’ principle and modern cryptographic best practices.
❌ A is incorrect because publicly vetted algorithms are generally stronger due to extensive cryptanalysis; secrecy does not guarantee strength.
❌ B is incorrect because government agencies frequently use both public and classified algorithms depending on the sensitivity and threat model.
❌ D is incorrect because team size does not determine algorithm security; mathematical soundness and implementation quality do.

Q9: Non-Repudiation in Cryptography

Within cryptographic systems, what does the concept of “non-repudiation” specifically ensure?

A) Messages cannot be decrypted without possessing the appropriate private key
B) Senders can legally deny having transmitted a specific message
C) Unauthorized parties are prevented from accessing message content
D) Senders cannot plausibly deny having originated a transmitted message ✓

Correct Answer: D

Justification:

✅ D is correct because non-repudiation provides cryptographic proof (typically via digital signatures) that a specific entity created or sent a message, preventing them from later denying involvement. This is critical for legal, financial, and contractual transactions.
❌ A is incorrect because this describes confidentiality, not non-repudiation.
❌ B is incorrect because non-repudiation specifically prevents denial; this option states the opposite.
❌ C is incorrect because preventing unauthorized access describes confidentiality and access control, not non-repudiation.

Q10: Web Traffic Security Protocol

Which protocol is most commonly deployed to secure web-based communications between clients and servers?

A) IPsec
B) SSL/TLS ✓
C) PGP
D) SSH

Correct Answer: B

Justification:

✅ B is correct because SSL/TLS (Secure Sockets Layer/Transport Layer Security) operates at the transport layer to encrypt HTTP traffic (HTTPS), authenticate servers via certificates, and ensure data integrity between browsers and web servers.
❌ A is incorrect because IPsec secures network-layer (Layer 3) IP traffic, typically used for VPNs, not web browser communications.
❌ C is incorrect because PGP secures email and file transfers at the application layer, not general web traffic.
❌ D is incorrect because SSH secures remote terminal access and command execution, not web browsing sessions.

Q11: TPM Endorsement Key

Within Trusted Platform Module (TPM) architecture, which cryptographic key is installed during manufacturing and remains immutable throughout the device lifecycle?

A) Storage Root Key (SRK)
B) Platform Configuration Registers (PCR)
C) Endorsement Key (EK) ✓
D) Attestation Identity Key (AIK)

Correct Answer: C

Justification:

✅ C is correct because the Endorsement Key (EK) is a unique RSA key pair generated during TPM manufacturing. The private key never leaves the TPM and serves as the hardware root of trust for device identity and attestation.
❌ A is incorrect because the SRK is generated by the TPM owner during initialization to protect other keys, not factory-installed.
❌ B is incorrect because PCRs are hash storage registers that hold integrity measurements, not cryptographic keys.
❌ D is incorrect because AIKs are generated by the TPM owner for privacy-preserving attestation, not pre-installed during manufacturing.

Q12: TPM Functionality Exception

Within Trusted Platform Module (TPM) capabilities, which function is NOT directly provided by TPM hardware?

A) Binding a hard disk drive to a specific computing system for access control
B) Sealing system configurations to ensure integrity verification at boot
C) Directly protecting systems against electromagnetic interference (EMI) ✓
D) Storing cryptographic keys and hash values in tamper-resistant memory

Correct Answer: C

Justification:

✅ C is correct because electromagnetic interference protection requires physical shielding (e.g., Faraday cages, TEMPEST controls). TPMs provide logical security functions (key storage, attestation, binding) but do not mitigate physical EMI.
❌ A is incorrect because TPM binding associates encrypted data with specific platform configurations, a core TPM capability.
❌ B is incorrect because sealing encrypts data to specific PCR values, enabling integrity verification; this is fundamental TPM functionality.
❌ D is incorrect because secure key and hash storage in tamper-resistant hardware is the TPM’s primary purpose.

Q13: Security Models Purpose

What is the fundamental purpose of implementing security models in information system design?

A) Providing structured frameworks for designing and deploying secure systems ✓
B) Drafting organizational security policies and administrative procedures
C) Conducting penetration testing exercises against deployed applications
D) Monitoring network traffic patterns for anomaly detection

Correct Answer: A

Justification:

✅ A is correct because security models (e.g., Bell-LaPadula, Biba, Clark-Wilson) provide theoretical and mathematical frameworks that guide architects in designing access controls, information flow policies, and system architectures to meet specific security objectives.
❌ B is incorrect because policy drafting is a governance function, not an architectural modeling activity.
❌ C is incorrect because penetration testing is a validation/assessment technique (Domain 6), not a design modeling purpose.
❌ D is incorrect because network monitoring is an operational security function, not related to security model implementation.

Q14: Zero-Knowledge Proof Concept

Within cryptographic protocols, what does the concept of a “zero-knowledge proof” specifically enable?

A) Encryption of all data such that no information can ever be recovered
B) Verification that a party possesses a private key without revealing it to others
C) Demonstration of knowledge of a secret without disclosing the secret itself ✓
D) Assurance that encryption algorithms are mathematically unbreakable

Correct Answer: C

Justification:

✅ C is correct because zero-knowledge proofs allow a prover to convince a verifier they possess specific knowledge (e.g., a password, private key, or credential) without revealing any information about the knowledge itself, preserving confidentiality while enabling verification.
❌ A is incorrect because zero-knowledge proofs are verification protocols, not encryption mechanisms.
❌ B is partially relevant but too narrow because zero-knowledge proofs apply to any secret knowledge, not just private keys; option C captures the broader, accurate definition.
❌ D is incorrect because zero-knowledge proofs do not guarantee algorithmic security; they are interactive proof systems, not cryptographic strength validators.

Q15: Elliptic Curve Cryptography Efficiency

Which cryptographic algorithm is recognized for delivering equivalent security strength with significantly smaller key sizes compared to RSA, making it ideal for resource-constrained devices?

A) Diffie-Hellman
B) El Gamal
C) Elliptic Curve Cryptosystems (ECC) ✓
D) Knapsack

Correct Answer: C

Justification:

✅ C is correct because ECC achieves comparable security to RSA with much smaller keys (e.g., 256-bit ECC ≈ 3072-bit RSA), resulting in faster computations, lower power consumption, and reduced bandwidth usage—ideal for mobile and IoT devices.
❌ A is incorrect because Diffie-Hellman is a key exchange protocol that typically requires larger key sizes and does not inherently offer the efficiency advantages of ECC.
❌ B is incorrect because El Gamal is an older asymmetric encryption/signature algorithm that is slower and requires larger keys than ECC.
❌ D is incorrect because Knapsack-based cryptosystems are largely broken or impractical for modern use due to vulnerabilities.

Q16: PKI Cryptographic Foundation

What cryptographic foundation does Public Key Infrastructure (PKI) primarily depend upon for its core operations?

A) Symmetric key algorithms for bulk data encryption
B) Asymmetric key algorithms for secure key exchange and digital signatures ✓
C) One-way hash functions for data integrity verification
D) Discrete logarithm problems exclusively

Correct Answer: B

Justification:

✅ B is correct because PKI relies on asymmetric cryptography (public/private key pairs) to establish trust, issue digital certificates, enable secure key exchange, and provide authentication, confidentiality, and non-repudiation across untrusted networks.
❌ A is incorrect because symmetric algorithms are used for data encryption after PKI establishes secure sessions, but PKI itself is built on asymmetric foundations.
❌ C is incorrect because hash functions support integrity and certificate signing but do not form the primary cryptographic foundation of PKI trust models.
❌ D is incorrect because while some asymmetric algorithms use discrete logarithms, PKI encompasses multiple mathematical foundations (factoring, elliptic curves, etc.), not exclusively discrete logarithms.

Q17: One-Way Function Characteristic

In the context of asymmetric cryptography, what characterizes a mathematical one-way function?

A) A function that is computationally easy to compute in one direction but practically infeasible to reverse ✓
B) A function that is exclusively used to generate public key certificates
C) A function that encrypts data but lacks a corresponding decryption mechanism
D) A function that authenticates message senders through digital certificates

Correct Answer: A

Justification:

✅ A is correct because one-way functions form the mathematical basis of asymmetric cryptography: they allow straightforward forward computation (e.g., encryption or signature generation) but make reverse computation (decryption or key derivation) computationally prohibitive without the private key.
❌ B is incorrect because certificate generation is a PKI process, not the definition of a one-way function.
❌ C is incorrect because one-way functions in cryptography are paired with trapdoor mechanisms that enable decryption with the private key; they are not inherently non-decryptable.
❌ D is incorrect because sender authentication is an application of asymmetric cryptography, not the mathematical definition of a one-way function.

Q18: El Gamal Algorithm Drawback

What represents the primary disadvantage of the El Gamal encryption algorithm compared to other asymmetric methods?

A) It provides weaker cryptographic security than modern standards
B) It is limited exclusively to key exchange operations
C) It exhibits slower computational performance due to mathematical complexity ✓
D) It lacks support for digital signature creation

Correct Answer: C

Justification:

✅ C is correct because El Gamal involves more computationally intensive operations (modular exponentiation) than algorithms like RSA or ECC, resulting in slower encryption/decryption speeds and larger ciphertext expansion (doubling message size).
❌ A is incorrect because El Gamal provides adequate security when properly parameterized; its limitation is performance, not inherent cryptographic weakness.
❌ B is incorrect because El Gamal supports both encryption and digital signatures, not just key exchange.
❌ D is incorrect because El Gamal can be adapted for digital signatures (e.g., DSA is derived from it), so this is not a valid limitation.

Q19: Diffie-Hellman Vulnerability

Which type of attack is the original Diffie-Hellman key exchange protocol particularly vulnerable to due to its lack of built-in authentication?

A) Brute-force key guessing
B) Side-channel power analysis
C) Man-in-the-middle (MitM) interception ✓
D) Time-memory trade-off attacks

Correct Answer: C

Justification:

✅ C is correct because the original Diffie-Hellman protocol does not authenticate participants before exchanging public values. An attacker can intercept the exchange, establish separate sessions with both parties, and decrypt/modify communications without detection.
❌ A is incorrect because Diffie-Hellman uses large prime numbers and discrete logarithms, making brute-force attacks computationally infeasible.
❌ B is incorrect because side-channel attacks target implementation leaks, not the protocol’s fundamental authentication gap.
❌ D is incorrect because time-memory trade-offs apply to hash functions and symmetric key recovery, not to the mathematical foundation of Diffie-Hellman.

Q20: RSA Algorithm Advantage

What primary advantage does the RSA algorithm offer over other asymmetric cryptographic methods?

A) It relies exclusively on discrete logarithm mathematics
B) It supports digital signatures, key exchange, and data encryption within a single framework ✓
C) It requires significantly smaller key sizes for equivalent security
D) It delivers the fastest encryption and decryption performance available

Correct Answer: B

Justification:

✅ B is correct because RSA’s versatility allows it to perform encryption, decryption, key exchange, and digital signatures using the same mathematical foundation (large integer factorization), making it widely adopted across diverse security applications.
❌ A is incorrect because RSA is based on the difficulty of factoring large primes, not discrete logarithms.
❌ C is incorrect because RSA requires larger key sizes (2048+ bits) compared to ECC for equivalent security.
❌ D is incorrect because RSA is computationally slower than symmetric algorithms and many modern asymmetric alternatives; speed is not its advantage.

Q21: RC5 Block Cipher Flexibility

Which block cipher is renowned for its exceptional flexibility in supporting variable block sizes, key lengths, and encryption round counts?

A) IDEA
B) RC4
C) RC5 ✓
D) RC6

Correct Answer: C

Justification:

✅ C is correct because RC5 was designed with highly configurable parameters: block sizes (32, 64, 128 bits), key sizes (up to 2040 bits), and rounds (0 to 255), allowing developers to balance security and performance for specific use cases.
❌ A is incorrect because IDEA uses fixed 64-bit blocks and 128-bit keys with 8.5 rounds, lacking RC5’s configurability.
❌ B is incorrect because RC4 is a stream cipher, not a block cipher, and uses a single variable-length key with fixed internal state.
❌ D is incorrect because RC6, while an evolution of RC5, uses fixed 128-bit blocks and standardized parameters rather than RC5’s extreme flexibility.

Q22: DES Effective Key Length

Considering the parity bits reserved for error checking, what is the effective cryptographic key length of the Data Encryption Standard (DES)?

A) 64 bits
B) 56 bits ✓
C) 128 bits
D) 32 bits

Correct Answer: B

Justification:

✅ B is correct because DES uses a 64-bit key input, but 8 bits are designated for parity checking. This leaves 56 bits as the actual cryptographic key material used for encryption and decryption operations.
❌ A is incorrect because 64 bits includes parity bits; only 56 bits contribute to cryptographic strength.
❌ C is incorrect because 128-bit keys belong to Triple DES or AES, not standard DES.
❌ D is incorrect because 32-bit keys are far too short for modern cryptographic standards and do not apply to DES.

Q23: DES Electronic Codebook (ECB) Mode

Which mode of DES operation is the simplest and fastest but may reveal underlying data patterns when encrypting large volumes of information?

A) Electronic Codebook (ECB) ✓
B) Cipher Block Chaining (CBC)
C) Cipher Feedback (CFB)
D) Output Feedback (OFB)

Correct Answer: A

Justification:

✅ A is correct because ECB mode encrypts each plaintext block independently using the same key. Identical plaintext blocks produce identical ciphertext blocks, revealing patterns and making it unsuitable for structured or repetitive data.
❌ B is incorrect because CBC chains blocks together using an initialization vector, preventing pattern leakage at the cost of slightly reduced performance.
❌ C is incorrect because CFB operates as a self-synchronizing stream cipher, hiding patterns but introducing different overhead.
❌ D is incorrect because OFB generates a keystream independent of plaintext, preventing patterns but not characterized as the simplest/fastest mode.

Q24: Blowfish Encryption Rounds

How many rounds of cryptographic transformations does the Blowfish encryption algorithm execute during processing?

A) 8 rounds
B) 12 rounds
C) 16 rounds ✓
D) 20 rounds

Correct Answer: C

Justification:

✅ C is correct because Blowfish is a 16-round Feistel network block cipher operating on 64-bit blocks with variable key lengths (32 to 448 bits). The 16 rounds provide sufficient diffusion and confusion for strong security.
❌ A is incorrect because 8 rounds would be cryptographically insufficient for modern standards.
❌ B is incorrect because 12 rounds does not match Blowfish’s designed structure.
❌ D is incorrect because 20 rounds exceeds Blowfish’s specification; 16 rounds were mathematically validated for optimal security-performance balance.

Q25: DES Block Size Specification

What block size does the Data Encryption Standard (DES) operate on during encryption and decryption processes?

A) 32-bit
B) 64-bit ✓
C) 128-bit
D) 256-bit

Correct Answer: B

Justification:

✅ B is correct because DES is a symmetric block cipher that processes data in fixed 64-bit blocks, transforming each block into 64-bit ciphertext using a 56-bit effective key.
❌ A is incorrect because 32-bit blocks are too small and belong to older or specialized ciphers, not DES.
❌ C is incorrect because 128-bit blocks are used by AES and many modern ciphers, not DES.
❌ D is incorrect because 256-bit blocks exceed DES’s design parameters and belong to newer cryptographic standards.

Q26: Advanced Encryption Standard (AES) Selection

Which cryptographic algorithm was officially selected by NIST to replace DES as the Advanced Encryption Standard (AES)?

A) MARS
B) Serpent
C) Twofish
D) Rijndael ✓

Correct Answer: D

Justification:

✅ D is correct because Rijndael, developed by Joan Daemen and Vincent Rijmen, won the NIST AES competition in 2001 due to its strong security, efficiency across platforms, and flexibility in supporting 128, 192, and 256-bit key sizes.
❌ A is incorrect because MARS was a finalist but not selected due to complexity and implementation overhead.
❌ B is incorrect because Serpent was highly secure but slower than Rijndael in software implementations.
❌ C is incorrect because Twofish was a strong contender but Rijndael demonstrated better overall performance and adaptability.

Q27: Kerckhoffs’ Principle

According to Kerckhoffs’ Principle in modern cryptography, what component should remain the sole secret element within a cryptosystem?

A) The cryptographic key material used for encryption and decryption ✓
B) Multiple secret elements including algorithms and implementation details
C) The encryption algorithm itself, kept confidential from public scrutiny
D) The key generation process, hidden to prevent reverse engineering

Correct Answer: A

Justification:

✅ A is correct because Kerckhoffs’ Principle states that a cryptosystem should remain secure even if all details except the key are publicly known. This enables peer review, standardization, and ensures security relies on key secrecy rather than algorithm obscurity.
❌ B is incorrect because relying on multiple secrets represents “security through obscurity,” which violates Kerckhoffs’ Principle and modern cryptographic best practices.
❌ C is incorrect because keeping algorithms secret prevents independent validation and typically results in weaker security over time.
❌ D is incorrect because while key generation should be secure, the principle specifically emphasizes that the algorithm can be public; only the key must remain secret.

Q28: Cryptographic Keyspace Purpose

What security benefit does implementing a large keyspace provide within an encryption algorithm?

A) Accelerating the encryption and decryption processing performance
B) Reducing computational resource requirements for cryptographic operations
C) Providing exponentially more possible key values, making brute-force guessing computationally infeasible ✓
D) Decreasing the size of encrypted messages for efficient storage and transmission

Correct Answer: C

Justification:

✅ C is correct because a large keyspace (e.g., 2^128 for AES-128) makes exhaustive key search attacks computationally impractical with current and foreseeable technology, ensuring long-term confidentiality.
❌ A is incorrect because keyspace size does not directly affect encryption speed; algorithm design and hardware determine performance.
❌ B is incorrect because larger keyspaces may slightly increase computational overhead for key generation; the benefit is security, not resource efficiency.
❌ D is incorrect because keyspace size does not impact ciphertext length; output size depends on algorithm mode and padding, not key quantity.

Q29: One-Time Pad Characteristic

What characterizes a one-time pad encryption scheme within cryptographic theory?

A) A reusable encryption key applied across multiple messages for efficiency
B) An encryption method using a single key for both encryption and decryption processes
C) An encryption scheme considered theoretically unbreakable when implemented correctly ✓
D) A physical pad used for securely recording hand-written encrypted messages

Correct Answer: C

Justification:

✅ C is correct because a one-time pad uses a truly random key as long as the message, used only once and kept completely secret. When these conditions are met, it provides perfect secrecy—no amount of computational power can determine the plaintext without the key.
❌ A is incorrect because reusing a one-time pad key completely breaks its security; the “one-time” requirement is absolute.
❌ B is incorrect because using a single key for encryption/decryption describes symmetric cryptography generally; the one-time pad is a specific, perfectly secure variant with unique requirements.
❌ D is incorrect because while historical pads used paper, the cryptographic concept refers to mathematical properties (randomness, length, single use), not the physical medium.

Q30: One-Time Pad Requirements

What conditions must be strictly satisfied for a one-time pad encryption scheme to achieve theoretical unbreakability?

A) The pad must be pseudorandom and reused across multiple messages for efficiency
B) The pad must be short, predictable, and reused to simplify key management
C) The pad must be truly random, used only once, and at least as long as the message ✓
D) The pad must be digitally encrypted to protect the key material during storage

Correct Answer: C

Justification:

✅ C is correct because one-time pad security requires: (1) truly random key material, (2) single use per message, and (3) key length matching or exceeding message length. Violating any condition destroys the perfect secrecy property.
❌ A is incorrect because pseudorandomness introduces patterns, and key reuse enables cryptanalysis through XOR operations on multiple ciphertexts.
❌ B is incorrect because short, predictable, reused keys would be trivially breakable and provide zero cryptographic security.
❌ D is incorrect because encrypting the pad creates a circular dependency; the pad’s security relies on physical/logical secrecy, not additional cryptography.

Q31: Fundamental Cipher Types

What are the two fundamental types of ciphers used as building blocks in symmetric encryption algorithms?

A) Asymmetric and symmetric
B) Substitution and transposition ✓
C) Block and stream
D) Public and private

Correct Answer: B

Justification:

✅ B is correct because substitution ciphers replace plaintext elements with ciphertext elements according to a rule, while transposition ciphers rearrange the order of elements. Modern symmetric algorithms combine both operations across multiple rounds to achieve diffusion and confusion.
❌ A is incorrect because asymmetric and symmetric describe key management categories, not cipher transformation types.
❌ C is incorrect because block and stream describe how plaintext is processed, not the fundamental mathematical transformation methods.
❌ D is incorrect because public and private refer to key pairs in asymmetric cryptography, not symmetric cipher mechanics.

Q32: Transposition Cipher Key Role

In a transposition cipher, what specific function does the cryptographic key perform?

A) It replaces plaintext characters with alternative characters
B) It dictates the exact positions to which values are rearranged ✓
C) It remains constant throughout all encryption operations
D) It determines the total length of the encrypted message

Correct Answer: B

Justification:

✅ B is correct because transposition ciphers preserve plaintext characters but scramble their order. The key specifies the permutation pattern or column/row rearrangement sequence that determines how characters are repositioned.
❌ A is incorrect because character replacement defines substitution ciphers, not transposition.
❌ C is incorrect because keys typically change per session or message to maintain security; constant keys create predictable patterns.
❌ D is incorrect because transposition preserves message length; the key affects character order, not total size.

Q33: Key Derivation Function (KDF) Purpose

What is the primary cryptographic purpose of implementing Key Derivation Functions (KDFs)?

A) To weaken encryption strength for faster decryption processing
B) To generate cryptographically strong keys with random or pseudo-random values from input material ✓
C) To create public keys for asymmetric certificate generation
D) To simplify the mathematical complexity of encryption algorithms

Correct Answer: B

Justification:

✅ B is correct because KDFs transform low-entropy input (e.g., passwords, shared secrets) into high-entropy cryptographic keys suitable for encryption, signing, or authentication, often incorporating salts and iteration counts to resist brute-force attacks.
❌ A is incorrect because weakening encryption violates security principles; KDFs strengthen key material, not degrade it.
❌ C is incorrect because public key generation uses asymmetric key pair algorithms (RSA, ECC), not KDFs.
❌ D is incorrect because KDFs add computational steps to enhance security, not simplify algorithmic complexity.

Q34: Algebraic Cryptanalysis Focus

Which cryptanalytic approach specifically exploits the underlying mathematical structures and algebraic properties of an encryption algorithm to break it?

A) Side-channel attack—leveraging physical implementation leaks
B) Algebraic attack—targeting mathematical vulnerabilities within the algorithm ✓
C) Social engineering attack—manipulating human behavior
D) Differential cryptanalysis—analyzing ciphertext pairs with specific differences

Correct Answer: B

Justification:

✅ B is correct because algebraic cryptanalysis represents the encryption algorithm’s mathematical equations as a system of polynomial equations and solves them to recover the key. It directly targets structural weaknesses in the algorithm’s algebraic design rather than implementation flaws or statistical patterns.
❌ A is incorrect because side-channel attacks exploit physical characteristics like power consumption, timing, or electromagnetic emissions during encryption/decryption, not mathematical structures.
❌ C is incorrect because social engineering manipulates human psychology to bypass technical controls; it has no relationship to mathematical algorithm analysis.
❌ D is incorrect because differential cryptanalysis studies how specific differences in plaintext pairs affect ciphertext outputs through statistical analysis, focusing on propagation patterns rather than algebraic equation solving.

Q35: Adaptive vs. Standard Chosen-Ciphertext Attacks

In cryptographic cryptanalysis, what distinguishes an adaptive chosen-ciphertext attack from a standard chosen-ciphertext attack?

A) Adaptive attacks allow the attacker to modify subsequent attack strategies based on previously obtained decryption results ✓
B) Standard attacks use brute-force methods, while adaptive attacks rely solely on mathematical analysis
C) Adaptive attacks only employ statistical frequency analysis techniques
D) There is no practical difference; both terms describe identical attack methodologies

Correct Answer: A

Justification:

✅ A is correct because adaptive chosen-ciphertext attacks enable the attacker to iteratively select ciphertexts for decryption, analyze the resulting plaintexts, and use that information to refine subsequent ciphertext selections. This feedback loop significantly increases the attack’s efficiency and success probability compared to non-adaptive approaches.
❌ B is incorrect because standard chosen-ciphertext attacks also use mathematical analysis; the distinction lies in the adaptability of ciphertext selection, not the use of brute-force methods.
❌ C is incorrect because frequency analysis is associated with classical substitution ciphers, not modern adaptive chosen-ciphertext cryptanalysis.
❌ D is incorrect because the adaptability feature provides a tangible advantage; the terms describe distinct attack models with different capabilities and threat levels.

Q36: Known-Plaintext Attack Mechanics

In which cryptanalytic scenario does the attacker possess both the original plaintext and its corresponding ciphertext, aiming to deduce the encryption key?

A) Ciphertext-only attack—accessing only encrypted messages
B) Known-plaintext attack—utilizing matched plaintext-ciphertext pairs ✓
C) Chosen-ciphertext attack—selecting ciphertexts for decryption
D) Meet-in-the-middle attack—using intermediate encryption states

Correct Answer: B

Justification:

✅ B is correct because known-plaintext attacks occur when an attacker obtains matched pairs of plaintext and ciphertext (e.g., through standard message formats, headers, or predictable content). By analyzing these pairs, the attacker attempts to reverse-engineer the encryption key or algorithm parameters.
❌ A is incorrect because ciphertext-only attacks provide only encrypted data without any known plaintext, making key recovery significantly more difficult.
❌ C is incorrect because chosen-ciphertext attacks involve the attacker actively selecting ciphertexts and obtaining their decrypted plaintexts, rather than working with pre-existing plaintext-ciphertext pairs.
❌ D is incorrect because meet-in-the-middle attacks target double encryption schemes by computing forward from plaintext and backward from ciphertext to find matching intermediate values, not by utilizing known plaintext-ciphertext pairs.

Q37: Ciphertext-Only Attack Characteristics

Which cryptanalytic method involves an attacker intercepting multiple encrypted messages using the same algorithm and attempting to discover the encryption key without any plaintext knowledge?

A) Known-plaintext attack
B) Chosen-plaintext attack
C) Ciphertext-only attack ✓
D) Chosen-ciphertext attack

Correct Answer: C

Justification:

✅ C is correct because ciphertext-only attacks represent the most challenging cryptanalytic scenario, where the attacker only has access to encrypted data. Success relies on statistical analysis, pattern recognition, or algorithmic weaknesses, as no plaintext context is available.
❌ A is incorrect because known-plaintext attacks require access to both plaintext and ciphertext pairs, providing significantly more information than ciphertext-only scenarios.
❌ B is incorrect because chosen-plaintext attacks allow the attacker to select specific plaintexts for encryption, providing controlled input data that ciphertext-only attacks lack.
❌ D is incorrect because chosen-ciphertext attacks involve selecting ciphertexts for decryption, which requires active interaction with the decryption system, unlike passive ciphertext interception.

Q38: SHA-1 to SHA-2/SHA-3 Evolution Rationale

What critical cryptographic weakness prompted the development of SHA-2 and SHA-3 as replacements for the SHA-1 hashing algorithm?

A) Vulnerability to key recovery attacks exposing secret credentials
B) Susceptibility to collision attacks enabling forged digital signatures ✓
C) Inability to execute efficiently on modern hardware architectures
D) Incompatibility with X.509 digital certificate standards

Correct Answer: B

Justification:

✅ B is correct because SHA-1’s 160-bit output became practically vulnerable to collision attacks, where attackers could generate two different inputs producing identical hash values. This weakness undermined digital signatures and certificate integrity, necessitating migration to SHA-2 (256/512-bit) and SHA-3 for stronger collision resistance.
❌ A is incorrect because hash functions do not use or manage encryption keys; key recovery attacks target asymmetric/symmetric algorithms, not cryptographic hash functions.
❌ C is incorrect because SHA-1 was computationally efficient; newer algorithms were adopted for security strength, not performance optimization.
❌ D is incorrect because SHA-1 was fully compatible with X.509 certificates; the migration was driven by cryptographic weakness, not standards incompatibility.

Q39: Fuzzing in Secure Development

Which software testing methodology involves feeding malformed, unexpected, or randomly generated data into applications to uncover vulnerabilities and processing flaws?

A) Unit testing—validating individual code modules
B) Fuzzing—injecting anomalous data to trigger failures ✓
C) Regression testing—verifying existing functionality after changes
D) Static analysis—examining code without execution

Correct Answer: B

Justification:

✅ B is correct because fuzzing automatically generates invalid, unexpected, or random inputs to stress-test applications. By monitoring crashes, memory leaks, or assertion failures, fuzzing reveals buffer overflows, injection flaws, and unhandled exceptions that traditional testing might miss.
❌ A is incorrect because unit testing validates individual functions against expected inputs and outputs using predefined test cases, not anomalous or random data injection.
❌ C is incorrect because regression testing ensures existing functionality remains intact after code changes; it focuses on known workflows, not vulnerability discovery through malformed inputs.
❌ D is incorrect because static analysis examines source code or binaries without executing them, using pattern matching and data flow analysis rather than runtime input injection.

Q40: Static Analysis Purpose

Within secure software development, what is the primary objective of static analysis testing?

A) Simulating diverse input scenarios to observe runtime behavior
B) Examining source code without execution to identify defects and vulnerabilities ✓
C) Validating software performance in production-like environments
D) Confirming final software meets customer requirement specifications

Correct Answer: B

Justification:

✅ B is correct because static analysis tools parse and analyze source code or compiled binaries without executing the program. They identify coding errors, security vulnerabilities (e.g., SQL injection, buffer overflows), and policy violations early in development, reducing remediation costs.
❌ A is incorrect because simulating inputs during runtime describes dynamic testing or fuzzing, not static analysis which operates entirely without program execution.
❌ C is incorrect because production-like environment validation describes integration or user acceptance testing, not code examination without execution.
❌ D is incorrect because requirement validation describes acceptance testing; static analysis focuses on code quality and security, not business requirement fulfillment.

Q41: Default Deny Security Principle

According to the Software Engineering Institute’s secure coding practices, what does the “default deny” principle dictate?

A) Deny all requests unless explicitly required to allow them ✓
B) Always allow requests by default to ensure system functionality
C) Deny all outputs from the system to prevent data leakage
D) Allow all inputs into the system without validation for performance

Correct Answer: A

Justification:

✅ A is correct because the default deny (or fail-closed) principle establishes that all access requests, inputs, or actions are blocked by default. Only explicitly authorized and validated requests are permitted, minimizing the attack surface and preventing unintended access.
❌ B is incorrect because default allow (fail-open) creates significant security risks by permitting unvalidated requests; secure design mandates restrictive default configurations.
❌ C is incorrect because denying all outputs would render the system non-functional; default deny applies to access control and input validation, not system output suppression.
❌ D is incorrect because allowing unvalidated inputs violates secure coding fundamentals; input validation is essential to prevent injection attacks and data corruption.

Q42: SEI Secure Coding Exception

Which practice is NOT included in the Software Engineering Institute’s top 10 secure coding recommendations?

A) Implementing effective quality assurance techniques
B) Practicing defense in depth across system layers
C) Prioritizing high-performance code over secure code ✓
D) Sanitizing data sent to external systems and components

Correct Answer: C

Justification:

✅ C is correct because secure coding practices explicitly prioritize security over raw performance. Sacrificing security for speed introduces vulnerabilities; SEI guidelines emphasize secure design, input validation, and risk mitigation as foundational requirements.
❌ A is incorrect because quality assurance (testing, code review, static analysis) is a core SEI recommendation for identifying and remediating security flaws before deployment.
❌ B is incorrect because defense in depth (layered security controls) is a fundamental SEI principle ensuring that multiple safeguards protect against single points of failure.
❌ D is incorrect because data sanitization (output encoding, escaping) is explicitly recommended to prevent injection attacks and data corruption when communicating with external systems.

Q43: Service-Oriented Architecture (SOA) Purpose

What is the primary architectural function of Service-Oriented Architecture (SOA) in enterprise systems?

A) Providing centralized electrical power management for computing infrastructure
B) Offering standardized access to reusable services across diverse applications ✓
C) Enabling local personal computer resource sharing within offices
D) Synchronizing host clocks across distributed network segments

Correct Answer: B

Justification:

✅ B is correct because SOA structures systems as loosely coupled, reusable services that communicate through standardized protocols (e.g., SOAP, REST). This enables applications to share functionality, reduces redundancy, and supports agile integration across heterogeneous environments.
❌ A is incorrect because power management is an infrastructure/operations concern, not an application architecture methodology.
❌ C is incorrect because local PC sharing describes peer-to-peer networking or file sharing, not enterprise service integration through standardized APIs.
❌ D is incorrect because clock synchronization describes NTP (Network Time Protocol) functionality, not service-oriented application design.

Q44: Java Platform Independence Mechanism

What architectural feature enables Java applications to run consistently across different operating systems and hardware platforms?

A) Direct compilation into processor-specific machine code
B) Execution through the Java Virtual Machine (JVM) abstraction layer ✓
C) Dynamic linking to operating system-specific native libraries
D) Exclusive reliance on web browser ActiveX controls

Correct Answer: B

Justification:

✅ B is correct because Java compiles source code into platform-independent bytecode, which the JVM interprets or Just-In-Time (JIT) compiles into native machine code at runtime. This abstraction layer eliminates the need for platform-specific recompilation, enabling true cross-platform compatibility.
❌ A is incorrect because direct machine code compilation creates platform-specific executables that cannot run on different architectures without recompilation.
❌ C is incorrect because dynamic linking to native libraries creates platform dependencies; Java’s portability relies on avoiding direct OS/library coupling.
❌ D is incorrect because ActiveX is a Microsoft Windows-specific technology unrelated to Java’s cross-platform design; Java applets operate within the JVM sandbox.

Q45: Java Sandbox Security Function

Within Java’s security architecture, what is the primary purpose of the sandbox execution environment?

A) Accelerating applet performance through hardware optimization
B) Restricting applet access to system resources and limiting operations ✓
C) Authenticating user credentials before applet execution
D) Compiling Java source code into executable machine instructions

Correct Answer: B

Justification:

✅ B is correct because the Java sandbox creates an isolated execution environment that restricts untrusted code (e.g., applets) from accessing local file systems, executing arbitrary commands, or making network connections beyond the originating host. This containment prevents malicious or buggy code from compromising the host system.
❌ A is incorrect because sandboxing introduces overhead through security checks; performance optimization is not its primary purpose.
❌ C is incorrect because user authentication is handled by application-layer mechanisms; the sandbox enforces resource access restrictions regardless of user identity.
❌ D is incorrect because compilation is performed by the Java compiler (javac); the sandbox manages runtime execution permissions, not code transformation.

Q46: ActiveX Security Vulnerability

What represents a critical security weakness inherent to ActiveX control implementations?

A) Inability to download controls from external websites
B) Mandatory execution within restricted sandbox environments
C) Inheritance of the current user’s privilege levels upon execution ✓
D) Exclusion from Windows operating system component libraries

Correct Answer: C

Justification:

✅ C is correct because ActiveX controls execute with the same privileges as the logged-in user. If a malicious control runs under an administrator account, it gains full system access, enabling file modification, registry changes, and malware installation without additional privilege escalation.
❌ A is incorrect because ActiveX controls are specifically designed for web distribution and download; download capability is a feature, not a security weakness.
❌ B is incorrect because ActiveX controls historically operated outside sandboxes (unlike Java applets), relying instead on code signing for trust, which proved insufficient against malicious actors.
❌ D is incorrect because ActiveX is deeply integrated into Windows; its system integration is a design characteristic, not the primary security vulnerability.

Q47: Java Applet vs. ActiveX Security Difference

What fundamental security distinction separates Java applets from Microsoft ActiveX controls?

A) ActiveX controls operate independently of operating system platforms
B) Java applets bypass digital certificate verification requirements
C) Java applets execute within restricted sandboxes, while ActiveX relies on code signing ✓
D) ActiveX controls cannot be reused across different applications

Correct Answer: C

Justification:

✅ C is correct because Java applets run within a sandbox that strictly limits system resource access, providing inherent containment. ActiveX controls lack sandboxing and instead rely on Authenticode digital signatures to verify publisher identity, trusting that signed code is safe—a model vulnerable to compromised certificates or malicious signed code.
❌ A is incorrect because ActiveX is Windows-specific and deeply tied to COM/OLE technologies; it is not platform-independent.
❌ B is incorrect because Java applets can be signed for extended privileges; they do not bypass certificate verification but rather operate securely by default without requiring it.
❌ D is incorrect because ActiveX controls are explicitly designed for reuse across applications and web pages; reusability is a core feature, not a limitation.

Q48: Cloud Service Model Identification

Which option listed below does NOT represent a recognized cloud computing service delivery model?

A) Infrastructure-as-a-Service (IaaS)—provisioning virtualized compute, storage, and networking
B) Platform-as-a-Service (PaaS)—providing development frameworks and deployment environments
C) Software-as-a-Service (SaaS)—delivering complete applications via internet connectivity
D) Hardware-as-a-Service (HaaS)—leasing physical equipment with maintenance contracts ✓

Correct Answer: D

Justification:

✅ D is correct because “Hardware-as-a-Service” describes traditional equipment leasing or managed infrastructure contracts, not a cloud computing model characterized by on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service (NIST definition).
❌ A is incorrect because IaaS is a foundational cloud model delivering virtualized infrastructure resources that customers configure and manage.
❌ B is incorrect because PaaS provides development tools, runtime environments, and middleware, enabling developers to build and deploy applications without managing underlying infrastructure.
❌ C is incorrect because SaaS delivers fully functional applications accessible via web browsers, with the provider managing all infrastructure, platforms, and software updates.

Q49: Clustering in Server Environments

What primary operational benefit does server clustering technology provide in enterprise architectures?

A) Enforcing a single operating system across multiple heterogeneous servers
B) Reducing physical rack space requirements through hardware consolidation
C) Improving system availability and distributing workload through load balancing ✓
D) Expanding storage capacity without adding additional physical disk arrays

Correct Answer: C

Justification:

✅ C is correct because clustering groups multiple servers to function as a unified system, providing high availability (failover if a node fails) and load balancing (distributing requests across nodes). This ensures continuous service delivery and optimal resource utilization during peak demand.
❌ A is incorrect because clustering supports homogeneous or heterogeneous OS environments depending on the solution; enforcing a single OS is not a clustering objective.
❌ B is incorrect because clustering may increase physical footprint; space reduction is achieved through virtualization or blade servers, not clustering architecture.
❌ D is incorrect because storage expansion describes SAN/NAS or distributed storage systems; clustering focuses on compute availability and workload distribution.

Q50: CBC vs. ECB Block Cipher Modes

Which block cipher mode of operation prevents pattern leakage by incorporating dependency between encrypted blocks?

A) Electronic Code Book (ECB)—encrypting each block independently
B) Cipher Block Chaining (CBC)—linking each block to the previous ciphertext block ✓
C) Cipher Feedback (CFB)—operating as a self-synchronizing stream cipher
D) Counter (CTR)—encrypting sequential counter values instead of plaintext blocks

Correct Answer: B

Justification:

✅ B is correct because CBC XORs each plaintext block with the previous ciphertext block before encryption, creating inter-block dependency. This ensures identical plaintext blocks produce different ciphertext outputs, eliminating the pattern preservation vulnerability inherent in ECB mode.
❌ A is incorrect because ECB encrypts each block independently with the same key, causing identical plaintext blocks to generate identical ciphertext blocks and revealing structural patterns.
❌ C is incorrect because CFB operates as a stream cipher by encrypting an initialization vector or previous ciphertext block and XORing it with plaintext; while it hides patterns, CBC specifically emphasizes block chaining dependency.
❌ D is incorrect because CTR encrypts incrementing counter values and XORs them with plaintext, enabling parallel processing; it prevents patterns but through counter uniqueness rather than block chaining.

Q51: Strong Stream Cipher Characteristics

Which characteristic does NOT define a cryptographically strong stream cipher?

A) Long periods without repeating keystream patterns
B) Keystream statistically biased toward zero or one values ✓
C) Keystream nonlinearly related to the encryption key
D) Efficient hardware implementation with minimal resource overhead

Correct Answer: B

Justification:

✅ B is correct because a strong stream cipher must produce a statistically unbiased keystream with equal probability of zeros and ones. Bias toward specific values creates predictable patterns that attackers can exploit through statistical analysis to recover plaintext or key material.
❌ A is incorrect because long non-repeating periods are essential; short periods cause keystream reuse, enabling XOR-based cryptanalysis and plaintext recovery.
❌ C is incorrect because nonlinear key relationships prevent attackers from deriving keystream values or keys through linear equation solving, strengthening cryptographic resistance.
❌ D is incorrect because hardware efficiency enables practical deployment in real-time communications (e.g., VoIP, wireless); strong stream ciphers balance security with implementation feasibility.

Q52: Initialization Vector (IV) Purpose

What primary cryptographic function do Initialization Vectors (IVs) serve in block and stream cipher operations?

A) Accelerating encryption processing through parallel computation
B) Reducing ciphertext output size for bandwidth optimization
C) Preventing pattern formation by introducing randomness to identical plaintext ✓
D) Replacing the need for cryptographic keys during encryption

Correct Answer: C

Justification:

✅ C is correct because IVs add randomness to the encryption process, ensuring that identical plaintext encrypted with the same key produces different ciphertext outputs. This prevents pattern recognition, replay attacks, and statistical cryptanalysis while maintaining deterministic decryption when the same IV is used.
❌ A is incorrect because IVs do not inherently accelerate encryption; some modes (e.g., CBC) require sequential processing due to IV chaining, potentially reducing parallelization.
❌ B is incorrect because IVs increase ciphertext size slightly (IV must be transmitted/stored with ciphertext); they do not optimize bandwidth.
❌ D is incorrect because IVs supplement, not replace, cryptographic keys; security relies on key secrecy, while IVs provide randomness and must be unique but not secret.

Q53: Digital Envelope Hybrid Encryption

What architectural approach combines symmetric and asymmetric encryption methods to optimize both performance and security?

A) Session key method—using temporary keys for single communications
B) Digital envelope—encrypting data symmetrically and the key asymmetrically ✓
C) Key mixing—combining multiple algorithms into a single operation
D) Public Key Infrastructure (PKI)—managing certificate lifecycles

Correct Answer: B

Justification:

✅ B is correct because a digital envelope uses symmetric encryption (fast, efficient) to encrypt bulk data and asymmetric encryption (secure key distribution) to encrypt the symmetric key. This hybrid approach leverages the strengths of both methods: performance for data and secure key exchange without pre-shared secrets.
❌ A is incorrect because session keys describe temporary symmetric keys but do not inherently specify the hybrid encryption architecture that defines digital envelopes.
❌ C is incorrect because key mixing is not a standard cryptographic term; digital envelope specifically describes the symmetric data + asymmetric key encryption combination.
❌ D is incorrect because PKI manages certificates, keys, and trust relationships; it supports digital envelopes but is not the encryption architecture itself.

Q54: Atbash Cipher Classification

Which cryptographic classification accurately describes the Atbash encryption scheme?

A) Polyalphabetic substitution cipher—using multiple shifting alphabets
B) Transposition cipher—rearranging character positions
C) Monoalphabetic substitution cipher—mapping each letter to a fixed counterpart ✓
D) Rotor cipher machine—using mechanical rotating disks

Correct Answer: C

Justification:

✅ C is correct because Atbash is a monoalphabetic substitution cipher that reverses the alphabet (A↔Z, B↔Y, C↔X, etc.). Each plaintext letter consistently maps to a single ciphertext letter throughout the message, making it vulnerable to frequency analysis.
❌ A is incorrect because polyalphabetic ciphers (e.g., Vigenère) use multiple substitution alphabets that change based on a keyword; Atbash uses a single, static reversal mapping.
❌ B is incorrect because transposition ciphers rearrange character positions without substitution; Atbash substitutes letters while maintaining original order.
❌ D is incorrect because rotor machines (e.g., Enigma) use mechanical/electrical rotating components to change substitution patterns dynamically; Atbash is a simple static letter mapping.

Q55: Cryptanalysis Definition

What does the term “cryptanalysis” specifically denote within cryptographic science?

A) The study of designing unbreakable encryption algorithms
B) The science of analyzing and breaking encryption systems to recover plaintext or keys ✓
C) The practice of deploying cryptography in government communications
D) The method of securing messages using ancient hieroglyphic techniques

Correct Answer: B

Justification:

✅ B is correct because cryptanalysis is the discipline focused on examining cryptographic systems to identify weaknesses, recover plaintext without keys, or deduce encryption keys. It complements cryptography by stress-testing algorithms and informing stronger design practices.
❌ A is incorrect because designing encryption algorithms describes cryptography; cryptanalysis focuses on breaking or evaluating existing systems.
❌ C is incorrect because cryptographic deployment describes operational security or communications engineering, not the analytical study of breaking encryption.
❌ D is incorrect because hieroglyphics were used decoratively in ancient Egypt, not as a cryptanalytic methodology; cryptanalysis is a mathematical/computational discipline.

Q56: Simple Cipher Vulnerability

What primary cryptanalytic weakness affects basic substitution and transposition ciphers?

A) Excessive processing speed making them impractical for modern systems
B) Incompatibility with digital computing architectures
C) Susceptibility to frequency-analysis attacks exploiting language patterns ✓
D) Requirement for excessively long key material to achieve minimal security

Correct Answer: C

Justification:

✅ C is correct because simple substitution ciphers preserve letter frequency distributions (e.g., E, T, A appear most frequently in English), while simple transposition ciphers preserve letter identity. Attackers exploit these statistical patterns through frequency analysis to reconstruct plaintext without knowing the key.
❌ A is incorrect because simple ciphers are computationally fast; their weakness is cryptographic insecurity, not performance limitations.
❌ B is incorrect because simple ciphers operate easily on digital systems; their vulnerability stems from mathematical weakness, not architectural incompatibility.
❌ D is incorrect because key length is not the primary issue; even long keys cannot compensate for structural weaknesses that preserve linguistic patterns.

Q57: Key Derivation Function (KDF) Purpose

What is the primary cryptographic function of Key Derivation Functions (KDFs)?

A) Weakening encryption algorithms to enable faster decryption processing
B) Generating cryptographically strong keys from passwords or master key material ✓
C) Creating public keys exclusively for asymmetric certificate generation
D) Simplifying encryption algorithm complexity for legacy system compatibility

Correct Answer: B

Justification:

✅ B is correct because KDFs transform low-entropy inputs (e.g., user passwords, shared secrets) into high-entropy cryptographic keys suitable for encryption, authentication, or signing. They incorporate salts, iteration counts, and memory-hard operations to resist brute-force and dictionary attacks.
❌ A is incorrect because weakening encryption violates security principles; KDFs strengthen key material, not degrade algorithmic security.
❌ C is incorrect because public key generation uses asymmetric algorithms (RSA, ECC); KDFs derive symmetric keys or expand key material, not create public/private key pairs.
❌ D is incorrect because KDFs add computational steps to enhance security; they do not simplify algorithms or target legacy compatibility.

Q53: Bell-LaPadula Confidentiality Model

Which formal security model strictly enforces data confidentiality through mandatory access control rules such as “no read up” and “no write down”?

A) Biba Integrity Model
B) Bell-LaPadula Model ✓
C) Clark-Wilson Model
D) Brewer-Nash (Chinese Wall) Model

Correct Answer: B

Justification:

✅ B is correct because the Bell-LaPadula model was explicitly designed to preserve confidentiality in multi-level security environments. It enforces the Simple Security Property (no read up) to prevent lower-cleared subjects from accessing higher-classified data, and the *-Property (no write down) to prevent data leakage from higher to lower classification levels.
❌ A is incorrect because the Biba model focuses on data integrity, using inverse rules (“no read down,” “no write up”) to prevent contamination of high-integrity data by lower-integrity sources.
❌ C is incorrect because Clark-Wilson enforces integrity through well-formed transactions, separation of duties, and auditing, not classification-based confidentiality rules.
❌ D is incorrect because Brewer-Nash prevents conflicts of interest in commercial environments by dynamically restricting access based on previous access patterns, not static confidentiality levels.

Q58: Purpose of Security Models

What is the fundamental purpose of implementing formal security models in information system architecture?

A) Providing structured mathematical frameworks for designing and deploying secure systems ✓
B) Drafting organizational security policies and administrative procedures
C) Conducting penetration testing exercises against deployed applications
D) Monitoring network traffic patterns for anomaly detection

Correct Answer: A

Justification:

✅ A is correct because security models (e.g., Bell-LaPadula, Biba, Clark-Wilson, State Machine) provide theoretical and mathematical foundations that guide architects in designing access controls, information flow policies, and system architectures to meet specific security objectives before implementation.
❌ B is incorrect because policy drafting is a governance and administrative function; security models inform policy creation but do not replace it.
❌ C is incorrect because penetration testing is a validation/assessment technique (Domain 6) that occurs after system deployment, not a design modeling purpose.
❌ D is incorrect because network monitoring is an operational security function (Domain 7) focused on detection, not architectural design frameworks.

Q59: TPM Endorsement Key Characteristic

Within Trusted Platform Module (TPM) architecture, which cryptographic key is factory-installed during manufacturing and remains immutable throughout the device lifecycle?

A) Storage Root Key (SRK)
B) Platform Configuration Registers (PCR)
C) Endorsement Key (EK) ✓
D) Attestation Identity Key (AIK)

Correct Answer: C

Justification:

✅ C is correct because the Endorsement Key (EK) is a unique RSA key pair generated during TPM manufacturing. The private key never leaves the TPM and serves as the hardware root of trust for device identity, attestation, and secure boot processes.
❌ A is incorrect because the Storage Root Key (SRK) is generated by the TPM owner during initialization to protect other keys, not factory-installed.
❌ B is incorrect because PCRs are hash storage registers that hold integrity measurements of boot components, not cryptographic keys.
❌ D is incorrect because AIKs are generated by the TPM owner for privacy-preserving attestation, not pre-installed during manufacturing.

Q60: TPM Functionality Exception

Within Trusted Platform Module (TPM) capabilities, which function is NOT directly provided by TPM hardware?

A) Binding a hard disk drive to a specific computing system for access control
B) Sealing system configurations to ensure integrity verification at boot
C) Directly protecting systems against electromagnetic interference (EMI) ✓
D) Storing cryptographic keys and hash values in tamper-resistant memory

Correct Answer: C

Justification:

✅ C is correct because electromagnetic interference protection requires physical shielding (e.g., Faraday cages, TEMPEST-rated construction). TPMs provide logical security functions (key storage, attestation, binding) but do not mitigate physical EMI.
❌ A is incorrect because TPM binding associates encrypted data with specific platform configurations, a core TPM capability.
❌ B is incorrect because sealing encrypts data to specific PCR values, enabling integrity verification; this is fundamental TPM functionality.
❌ D is incorrect because secure key and hash storage in tamper-resistant hardware is the TPM’s primary purpose.

Q61: Hardware Security Module (HSM) Function

What is the principal function of a Hardware Security Module (HSM) within cryptographic infrastructure?

A) Securing network communication channels through protocol negotiation
B) Encrypting data stored on disk volumes using software-based algorithms
C) Authenticating user identities via biometric verification
D) Safeguarding and managing cryptographic key material in tamper-resistant hardware ✓

Correct Answer: D

Justification:

✅ D is correct because HSMs are dedicated, hardened physical devices designed to generate, store, protect, and manage cryptographic keys. They provide FIPS-validated secure environments, prevent key extraction, and accelerate cryptographic operations.
❌ A is incorrect because securing network channels is the role of protocols like TLS/IPsec, not HSMs.
❌ B is incorrect because disk encryption is handled by storage encryption solutions; HSMs may provide keys for these solutions but don’t perform the encryption themselves.
❌ C is incorrect because biometric authentication is managed by identity management systems and sensors, not cryptographic key management hardware.

Q62: Discretionary Access Control (DAC) Characteristic

What represents the defining characteristic of Discretionary Access Control (DAC) models?

A) Access decisions based on user security clearance levels and classifications
B) Operating system enforcement of access per predefined, immutable policies
C) Resource owners determining which subjects may access their controlled objects ✓
D) Access permissions assigned based on organizational role and job function definitions

Correct Answer: C

Justification:

✅ C is correct because DAC empowers object owners (users who create or control resources) to specify access permissions for other subjects. This discretionary model allows flexible, user-managed access control but may introduce risks if owners grant excessive permissions.
❌ A is incorrect because clearance-based decisions characterize Mandatory Access Control (MAC), where system policies—not owner discretion—determine access based on labels and clearances.
❌ B is incorrect because immutable policy enforcement describes MAC or Rule-Based Access Control, where administrators or system policies define access, not resource owners.
❌ D is incorrect because role-based assignment defines Role-Based Access Control (RBAC), where permissions follow job functions rather than individual owner decisions.

Q63: Mandatory Access Control (MAC) Example

Which scenario best exemplifies Mandatory Access Control (MAC) implementation?

A) A user with ‘secret’ clearance attempting to access ‘top secret’ documents
B) An employee accessing files based on departmental role assignments
C) A system administrator assigning permissions per individual job requirements
D) A user unable to modify permissions or install software due to system-enforced restrictions ✓

Correct Answer: D

Justification:

✅ D is correct because MAC enforces access decisions through system policies that users cannot override. When the operating system prevents permission changes or software installation regardless of user preference, it demonstrates MAC’s characteristic of centralized, non-discretionary control.
❌ A is incorrect because clearance mismatches represent access denial under MAC rules, but the scenario doesn’t demonstrate the system-enforced, non-discretionary nature that defines MAC implementation.
❌ B is incorrect because departmental role assignments describe Role-Based Access Control (RBAC), where permissions follow organizational structure rather than mandatory system policies.
❌ C is incorrect because administrator-assigned permissions represent discretionary or role-based approaches; MAC decisions derive from system policies and labels, not individual administrative assignments.

Q64: Role-Based Access Control (RBAC) Model

Which access control model enables permissions management based on user job roles within organizations?

A) Discretionary Access Control—owner-determined permissions
B) Mandatory Access Control—system-enforced policy decisions
C) Role-Based Access Control—permissions assigned to organizational roles ✓
D) Rule-Based Access Control—context-dependent access decisions

Correct Answer: C

Justification:

✅ C is correct because Role-Based Access Control (RBAC) assigns permissions to roles (e.g., “manager,” “analyst,” “administrator”) rather than individual users. Users inherit permissions by role assignment, simplifying administration and aligning access with job functions.
❌ A is incorrect because DAC bases permissions on object owner decisions, not organizational roles; owners may grant access regardless of role or job function.
❌ B is incorrect because MAC enforces access through system policies and security labels, not role assignments; clearance and classification drive MAC decisions.
❌ D is incorrect because Rule-Based Access Control makes decisions based on contextual rules (time, location, device type, transaction amount), not role membership; RBAC specifically centers on job function definitions.

Q65: SELinux as MAC Implementation

Which system exemplifies implementation of Mandatory Access Control (MAC) principles?

A) Standard Microsoft Windows operating system configurations
B) Typical Linux distributions with default permission settings
C) Security-Enhanced Linux (SELinux) developed by the National Security Agency ✓
D) Consumer-grade personal computer systems with standard user accounts

Correct Answer: C

Justification:

✅ C is correct because SELinux implements MAC by enforcing system-defined security policies that even root users cannot override. Access decisions consider security contexts (labels) assigned to subjects and objects, providing granular, policy-driven control suitable for high-security environments.
❌ A is incorrect because standard Windows configurations primarily use DAC (owner/ACL-based permissions); while Windows supports some MAC-like features, default configurations are discretionary.
❌ B is incorrect because typical Linux distributions use traditional Unix DAC (owner/group/other permissions); MAC requires explicit configuration of frameworks like SELinux or AppArmor.
❌ D is incorrect because consumer PCs typically implement basic DAC without MAC policies; mandatory controls require specialized configuration not present in standard consumer deployments.

Q66: Hierarchical RBAC Feature

What characterizes Hierarchical Role-Based Access Control (RBAC) implementations?

A) Users may install software based solely on assigned role permissions
B) Role inheritance capabilities reflecting organizational structural relationships ✓
C) Access Control Lists enforcing object-level permission decisions
D) Permission decisions based on resource owner discretionary choices

Correct Answer: B

Justification:

✅ B is correct because hierarchical RBAC enables roles to inherit permissions from other roles, modeling organizational reporting structures (e.g., “manager” inherits “employee” permissions). This simplifies administration by reducing redundant permission assignments and aligning access with organizational hierarchy.
❌ A is incorrect because software installation permissions represent a specific access right, not the defining characteristic of hierarchical RBAC; inheritance, not installation rights, distinguishes hierarchical models.
❌ C is incorrect because ACLs represent a permission representation mechanism used across access control models, not a feature specific to hierarchical RBAC.
❌ D is incorrect because owner-discretionary decisions characterize DAC, not RBAC; RBAC assigns permissions based on roles, not individual owner choices.

Q67: Need-to-Know Rule Application

Within which access control model does the “need-to-know” principle specifically apply as a mandatory access requirement?

A) Discretionary Access Control—owner-granted permissions
B) Mandatory Access Control—clearance plus need-to-know requirements ✓
C) Role-Based Access Control—job function-based permissions
D) Attribute-Based Access Control—policy-driven attribute evaluation

Correct Answer: B

Justification:

✅ B is correct because MAC systems enforce both security clearance (formal authorization level) and need-to-know (operational requirement for specific information). Even with appropriate clearance, subjects must demonstrate legitimate need for specific data, adding a second layer of access control.
❌ A is incorrect because DAC permissions depend on owner discretion, not formal clearance or need-to-know requirements; owners may grant access regardless of operational necessity.
❌ C is incorrect because RBAC assigns permissions based on role membership; while roles may reflect job functions implying need, explicit need-to-know enforcement is not inherent to RBAC.
❌ D is incorrect because ABAC evaluates attributes dynamically; while policies could encode need-to-know logic, the principle is not specifically characteristic of ABAC as it is of MAC.

Q68: Sensitivity Labels Definition

Within Mandatory Access Control contexts, what do “sensitivity labels” specifically contain?

A) Identifiers specifying object ownership within discretionary control systems
B) Definitions of permitted operations for subjects within role-based systems
C) Classification levels and category designations enforcing MAC access decisions ✓
D) Rule specifications governing object access within attribute-based frameworks

Correct Answer: C

Justification:

✅ C is correct because sensitivity labels in MAC systems contain classification levels (e.g., Unclassified, Confidential, Secret, Top Secret) and categories (e.g., nuclear, diplomatic, intelligence) that drive access decisions. Subjects must possess clearance at or above the object’s classification and have need-to-know for relevant categories.
❌ A is incorrect because ownership identifiers relate to DAC systems where owners control access; MAC labels enforce system policy, not ownership-based permissions.
❌ B is incorrect because operation definitions describe RBAC permissions or capability lists; MAC labels contain classification metadata, not operational permission specifications.
❌ D is incorrect because rule specifications characterize Rule-Based or Attribute-Based Access Control; MAC labels are data classifications, not access rule definitions.

Q69: Attribute-Based Access Control (ABAC) Granularity

Which access control mechanism provides the greatest granularity for defining detailed access policies?

A) Discretionary Access Control—owner-specified permissions
B) Mandatory Access Control—label-based policy enforcement
C) Role-Based Access Control—role-assigned permission sets
D) Attribute-Based Access Control—policy evaluation of subject/object attributes ✓

Correct Answer: D

Justification:

✅ D is correct because Attribute-Based Access Control (ABAC) evaluates policies against attributes of subjects, objects, actions, and environmental conditions. This enables highly specific policies (e.g., “Managers in Finance may view salary data during business hours from corporate networks”), providing finer granularity than role, label, or owner-based models.
❌ A is incorrect because DAC granularity depends on owner decisions and ACL detail; while flexible, it lacks the policy-driven, attribute-based evaluation that enables ABAC’s precision.
❌ B is incorrect because MAC granularity is limited to classification levels and categories; while strong for confidentiality, it cannot express complex contextual policies as ABAC can.
❌ C is incorrect because RBAC granularity is constrained by role definitions; creating highly specific roles for every policy variation leads to role explosion, whereas ABAC handles complexity through attribute evaluation.

Q70: ACL vs. Capability Table Distinction

What represents the fundamental distinction between Access Control Lists (ACLs) and capability tables in access control implementations?

A) ACLs specify subject operations while capability tables list accessible objects for subjects
B) ACLs are bound to objects while capability tables are bound to subjects ✓
C) Capability tables configure network settings while ACLs manage operating system permissions
D) Capability tables provide encryption while ACLs maintain authorized user lists

Correct Answer: B

Justification:

✅ B is correct because ACLs are attached to objects (files, resources) and list which subjects may access them and with what permissions. Capability tables (or capability lists) are attached to subjects and list which objects they may access and with what permissions. This binding distinction affects how permissions are managed and evaluated.
❌ A is incorrect because both ACLs and capabilities can specify operations; the key distinction is whether the permission list is associated with the object (ACL) or subject (capability), not the content of the list.
❌ C is incorrect because both mechanisms can apply to network or OS contexts; the distinction is structural (object-bound vs. subject-bound), not domain-specific.
❌ D is incorrect because neither mechanism provides encryption; both are access control structures for managing permissions, not cryptographic functions.

Q71: TCSEC/Orange Book Evaluation Criteria (Adapted)

Which historical evaluation standard established the foundational “Orange Book” framework for assessing operating system security through hierarchical divisions (A through D)?

A) Common Criteria (ISO/IEC 15408)
B) Trusted Computer System Evaluation Criteria (TCSEC) ✓
C) IT Security Evaluation Criteria (ITSEC)
D) Federal Information Processing Standards (FIPS)

Correct Answer: B

Justification:

✅ B is correct because TCSEC, published by the U.S. Department of Defense in 1985, is commonly known as the Orange Book. It introduced the first formal evaluation framework with hierarchical divisions (D minimal protection, C discretionary protection, B mandatory protection, A verified protection) and established foundational trusted system concepts.
❌ A is incorrect because Common Criteria (ISO/IEC 15408) succeeded TCSEC/ITSEC, using Evaluation Assurance Levels (EAL1-7) and Protection Profiles rather than the A-D hierarchical structure.
❌ C is incorrect because ITSEC was the European counterpart to TCSEC, focusing on functionality and assurance separately, not using the Orange Book’s letter-graded hierarchy.
❌ D is incorrect because FIPS standards cover cryptographic algorithms and general federal computing requirements, not the comprehensive trusted OS evaluation framework defined in the Orange Book.

Q72: Common Criteria EAL Levels (Adapted)

Within the Common Criteria framework, what does an Evaluation Assurance Level (EAL) specifically measure?

A) The functional security capabilities of a product
B) The depth and rigor of independent testing and verification applied to a system ✓
C) The financial cost of security certification
D) The geographic region where the product is approved for use

Correct Answer: B

Justification:

✅ B is correct because EALs (1 through 7) in Common Criteria measure the rigor, depth, and formality of the evaluation process—not the security features themselves. Higher EALs require more extensive documentation, design analysis, penetration testing, and independent verification.
❌ A is incorrect because functional capabilities are defined in Security Functional Requirements (SFRs) and Protection Profiles, not EALs; EALs measure how thoroughly those functions were tested.
❌ C is incorrect because EALs have no direct relationship to certification costs; costs depend on product complexity, evaluator fees, and organizational factors.
❌ D is incorrect because Common Criteria is internationally recognized through mutual recognition agreements; EALs do not restrict geographic approval.

Q73: Trusted Computing Base (TCB) Definition (Adapted)

Within trusted system architecture, what does the Trusted Computing Base (TCB) specifically encompass?

A) Only the cryptographic hardware modules used for encryption
B) The complete set of hardware, firmware, and software components critical to enforcing security policy ✓
C) The external security consultants auditing the system
D) The user authentication database only

Correct Answer: B

Justification:

✅ B is correct because the TCB includes all protection mechanisms (hardware, firmware, software) that enforce the system’s security policy. If any TCB component fails, the system’s security guarantees are compromised, making its correct implementation and verification critical.
❌ A is incorrect because cryptographic modules are just one potential TCB component; the TCB encompasses all policy-enforcing elements, including OS kernels, access control mechanisms, and reference monitors.
❌ C is incorrect because external auditors are independent validators, not part of the system’s operational TCB.
❌ D is incorrect because authentication databases are only one component; the TCB includes all elements enforcing security policy, not just identity storage.

Q74: Smart Card Security Architecture (Adapted)

What primary security advantage do smart cards provide over traditional magnetic stripe cards?

A) Lower manufacturing costs and wider availability
B) On-card cryptographic processing and secure key storage preventing credential extraction ✓
C) Compatibility with all legacy magnetic readers without modification
D) Unlimited data storage capacity for user profiles

Correct Answer: B

Justification:

✅ B is correct because smart cards contain embedded microprocessors or secure chips that perform cryptographic operations internally. Private keys and sensitive data never leave the card, preventing skimming, cloning, and unauthorized extraction that plague magnetic stripe technology.
❌ A is incorrect because smart cards are significantly more expensive to manufacture than magnetic stripe cards; cost is not their security advantage.
❌ C is incorrect because smart cards require specialized contact or contactless readers; they are not backward-compatible with standard magnetic stripe readers without adapters.
❌ D is incorrect because smart cards have limited secure storage (typically kilobytes); their advantage lies in secure processing, not storage capacity.

Q75: Reference Monitor Concept (Adapted)

Within trusted system design, what three properties must an abstract reference monitor implementation satisfy according to security architecture theory?

A) Tamperproof, verifiable, and always invoked ✓
B) Encrypted, distributed, and redundant
C) Cloud-hosted, scalable, and load-balanced
D) Open-source, publicly audited, and community-maintained

Correct Answer: A

Justification:

✅ A is correct because the reference monitor concept requires: (1) Complete mediation (always invoked for every access), (2) Tamperproof (protected from unauthorized modification), and (3) Verifiable (small and simple enough to be mathematically proven correct). These properties ensure reliable security policy enforcement.
❌ B is incorrect because encryption, distribution, and redundancy are system design characteristics, not the foundational reference monitor properties required for trusted system certification.
❌ C is incorrect because cloud hosting, scalability, and load balancing describe modern infrastructure architecture, not the theoretical reference monitor requirements.
❌ D is incorrect because while open-source and auditing are beneficial, they do not define the three mandatory reference monitor properties required by trusted computing theory.

Q1: Asymmetric Encryption Architecture

Q2: Symmetric Encryption Fundamentals

Q3: Security Architecture Objective

Q4: Hardware Security Module (HSM) Function

Q5: Bell-LaPadula Security Model

Q6: Secure Password Storage Best Practice

Q7: Side-Channel Attack Objective

Q8: Public vs. Secret Algorithms

Q9: Non-Repudiation in Cryptography

Q10: Web Traffic Security Protocol

Q11: TPM Endorsement Key

Q12: TPM Functionality Exception

Q13: Security Models Purpose

Q14: Zero-Knowledge Proof Concept

Q15: Elliptic Curve Cryptography Efficiency

Q16: PKI Cryptographic Foundation

Q17: One-Way Function Characteristic

Q18: El Gamal Algorithm Drawback

Q19: Diffie-Hellman Vulnerability

Q20: RSA Algorithm Advantage

Q21: RC5 Block Cipher Flexibility

Q22: DES Effective Key Length

Q23: DES Electronic Codebook (ECB) Mode

Q24: Blowfish Encryption Rounds

Q25: DES Block Size Specification

Q26: Advanced Encryption Standard (AES) Selection

Q27: Kerckhoffs’ Principle

Q28: Cryptographic Keyspace Purpose

Q29: One-Time Pad Characteristic

Q30: One-Time Pad Requirements

Q31: Fundamental Cipher Types

Q32: Transposition Cipher Key Role

Q33: Key Derivation Function (KDF) Purpose

Q34: Algebraic Cryptanalysis Focus

Q35: Adaptive vs. Standard Chosen-Ciphertext Attacks

Q36: Known-Plaintext Attack Mechanics

Q37: Ciphertext-Only Attack Characteristics

Q38: SHA-1 to SHA-2/SHA-3 Evolution Rationale

Q39: Fuzzing in Secure Development

Q40: Static Analysis Purpose

Q41: Default Deny Security Principle

Q42: SEI Secure Coding Exception

Q43: Service-Oriented Architecture (SOA) Purpose

Q44: Java Platform Independence Mechanism

Q45: Java Sandbox Security Function

Q46: ActiveX Security Vulnerability

Q47: Java Applet vs. ActiveX Security Difference

Q48: Cloud Service Model Identification

Q49: Clustering in Server Environments

Q50: CBC vs. ECB Block Cipher Modes

Q51: Strong Stream Cipher Characteristics

Q52: Initialization Vector (IV) Purpose

Q53: Digital Envelope Hybrid Encryption

Q54: Atbash Cipher Classification

Q55: Cryptanalysis Definition

Q56: Simple Cipher Vulnerability

Q57: Key Derivation Function (KDF) Purpose

Q58: Purpose of Security Models

Q59: TPM Endorsement Key Characteristic

Q60: TPM Functionality Exception

Q61: Hardware Security Module (HSM) Function

Q62: Discretionary Access Control (DAC) Characteristic

Q63: Mandatory Access Control (MAC) Example

Q64: Role-Based Access Control (RBAC) Model

Q65: SELinux as MAC Implementation

Q66: Hierarchical RBAC Feature

Q67: Need-to-Know Rule Application

Q68: Sensitivity Labels Definition

Q69: Attribute-Based Access Control (ABAC) Granularity

Q70: ACL vs. Capability Table Distinction

Q71: TCSEC/Orange Book Evaluation Criteria (Adapted)

Q72: Common Criteria EAL Levels (Adapted)

Q73: Trusted Computing Base (TCB) Definition (Adapted)

Q74: Smart Card Security Architecture (Adapted)

Q75: Reference Monitor Concept (Adapted)

Related Posts

Leave a Comment Cancel Reply

techyengineer

Menu

Our Blogs