Question 1

Does the term key management refer to a password-protected and encrypted file that holds an individual's identification information, including a public key?

Accepted Answer

Key management refers to the process of managing cryptographic keys in a cryptosystem, which includes the generation, exchange, storage, use, and replacement of keys. It does not specifically refer to a password-protected and encrypted file holding an individual's identification information.

Question 2

Is Kerberos a cross-platform authentication protocol that uses key encryption to verify the identity of clients?

Accepted Answer

Kerberos is a network authentication protocol designed to provide strong authentication for client/server applications by using secret-key cryptography. It is indeed cross-platform, meaning it can be implemented across various operating systems, and it primarily uses key encryption to securely verify the identities of clients and servers within a network.

Question 3

Can you use PGP to verify the authenticity of an e-mail sender?

Accepted Answer

PGP (Pretty Good Privacy) can be used to digitally sign emails, allowing the recipient to verify the authenticity of the email sender by using the sender's public key to confirm the digital signature is valid.

Question 4

Does the handshake protocol authenticate the client and server, and establish terms for how they will securely exchange data?

Accepted Answer

The handshake protocol is a part of the SSL/TLS process, which authenticates both the client and server and establishes encryption methods and keys for securely exchanging data over a network.

Question 5

A(n) ____________________ should lead to recommendations for improving information security and must precede any of the protective measures described in this chapter.

Accepted Answer

The answer of A(n) ____________________ should lead to recommendations for...

Question 6

Computer programs that dial multiple telephone numbers in rapid succession, attempting to access and receive a handshake response from a modem, are known as ____________________.

Accepted Answer

The answer of Computer programs that dial multiple telephone numbers...

Question 7

In ____________________, data is encrypted using a single key that only the sender and the receiver know.

Accepted Answer

The answer of In ____________________, data is encrypted using a...

Question 8

In ____________________ encryption, data is encrypted using two keys.

Accepted Answer

The answer of In ____________________ encryption, data is encrypted using...

Question 9

The combination of the public key and private key is known as a(n) ____________________.

Accepted Answer

The answer of The combination of the public key and...

Question 10

A(n) ____________________ is a password-protected and encrypted file that holds an individual's identification information, including a public key.

Accepted Answer

The answer of A(n) ____________________ is a password-protected and encrypted...

Question 11

____________________ is a cross-platform authentication protocol that uses key encryption to verify the identity of clients and to securely exchange information after a client logs on to a system.

Accepted Answer

The answer of ____________________ is a cross-platform authentication protocol that...

Question 12

____________________ is a public key encryption system that can verify the authenticity of an e-mail sender and encrypt e-mail data in transmission.

Accepted Answer

The answer of ____________________ is a public key encryption system...

Question 13

The ____________________ protocol authenticates (or introduces) the client and server to each other and establishes terms for how they will securely exchange data.

Accepted Answer

The answer of The ____________________ protocol authenticates (or introduces) the...

Question 14

____________________ is the use of a transmission or recording device to capture conversations without the consent of the speakers.

Accepted Answer

The answer of ____________________ is the use of a transmission...

Question 15

Match each statement below with the correct item
-A security attack in which an outsider obtains internal IP addresses, then uses them to pretend that he or she has authority to access a private network from the Internet.

Accepted Answer

IP spoofing is a technique used by attackers to gain unauthorized access to a network by pretending to be a trusted computer by using an IP address that is not their own.

Question 16

Match each statement below with the correct item
-The combination of a public and private key used to decipher data that has been encrypted using public key encryption.

Accepted Answer

A key pair in public key encryption consists of a public key and a private key. The public key is used to encrypt data, and the private key is used to decrypt it.

Question 17

Match each statement below with the correct item
-The URL prefix that indicates that a Web page requires its data to be exchanged between client and server using SSL encryption.

Accepted Answer

HTTPS is the URL prefix that indicates a Web page requires its data to be exchanged between client and server using SSL (Secure Sockets Layer) encryption, ensuring secure transmission.

Question 18

Match each statement below with the correct item
-A series of characters that is combined with a block of data during that data's encryption.

Accepted Answer

A key is used in combination with a block of data during encryption to secure the data.

Question 19

Match each statement below with the correct item
-The use of a microphone with a small RF transmitter placed near an audio source and a nearby receiver to eavesdrop.

Accepted Answer

Bugging involves placing a small microphone with an RF transmitter near an audio source to capture and transmit conversations to a nearby receiver, which is a form of eavesdropping.

Question 20

Match each statement below with the correct item
-The unique data block that results when an original piece of data is encrypted.

Accepted Answer

Cipher text is the term used to describe the encrypted version of the original data, which is transformed into a seemingly random sequence of characters that cannot be easily understood without the key to decrypt it.

Quiz 13: Information Security