Net Quiz 5

Identify three situations in which the hashing function can be applied. (Choose three.)

• DES

• PKI

• IPsec

• WPA

• CHAP

A user has created a new program and wants to distribute it to everyone in the company. The user wants to ensure that when the program is downloaded that the program is not changed while in transit. What can the user do to ensure that the program is not changed when downloaded?

• Create a hash of the program file that can be used to verify the integrity of the file after it is downloaded.

• Turn off antivirus on all the computers.

• Distribute the program on a thumb drive.

• Encrypt the program and require a password after it is downloaded.

An email sent throughout the company stated that there would be a change in security policy. The security officer who was presumed to have sent the message stated the message was not sent and the company may be a victim of a spoofed email. What could have been added to the message to ensure the message actually came from the person?

• non-repudiation

• digital signature

• asymmetric key

• hashing

What are three NIST-approved digital signature algorithms? (Choose three.)

• DSA

• ECDSA

• SHA256

• MD5

• RSA

Alice and Bob use the same password to login into the company network. This means both would have the exact same hash for their passwords. How to prevent both password hashes from being the same?

• peppering

• pseudo-random generator

• salting

• RSA

What is the step by step process for creating a digital signature?

• Create a message digest; encrypt the digest with the private key of the sender; and bundle the message, encrypted digest, and public key together in order to sign the document.

• Create a message digest; encrypt the digest with the public key of the sender; and bundle the message, encrypted digest, and public key together to sign the document.

• Create a message; encrypt the message with a MD5 hash; and send the bundle with a public key.

• Create a SHA-1 hash; encrypt the hash with the private key of the sender; and bundle the message, encrypted hash, and public key together to signed document.

What is a strength of using a hashing function?

• It is a one-way function and not reversible.

• Two different files can be created that have the same output.

• It has a variable length output.

• It is not commonly used in security.

What are three type of attacks that are preventable through the use of salting? (Choose three.)

• rainbow tables

• social engineering

• lookup tables

• reverse lookup tables

A user has been asked to implement IPsec for inbound external connections. The user plans to use SHA-1 as part of the implementation. The user wants to ensure the integrity and authenticity of the connection. What security tool can the user use?

• HMAC

• SHA256

• ISAKMP

• MD5

A user downloads an updated driver for a video card from a website. A warning message pops up saying the driver is not approved. What does this piece of software lack?

• digital signature

• valid ID

• source code

• code recognition