Secure Web Applications Quiz

What is the standard way to protect against network-based threats?

• AES

• SHA-256

• RSA

• SSL

What is the purpose of using Certificate chains?

• To generate random numbers

• To secure data in transit

• To encrypt data at rest

• To provide better scalability and control of certificates

Why is it important to use only the latest secure protocols like TLS?

• To reduce server costs

• To increase network speed

• To improve user experience

• To ensure data security

Which of the following should be avoided when selecting cipher suites?

• ANON for authentication

• RSA for signing

• AES for encryption

• EXPORT for encryption

What is the role of trust managers in TLS connections?

• To establish network connections

• To determine if the code should trust the other side of the connection

• To manage encryption keys

• To validate digital signatures

What is the purpose of encryption in securing data at rest?

• To keep data secret

• To prevent eavesdropping

• To validate the source of data

• To establish trust between servers

What distinguishes symmetric cryptography from asymmetric cryptography?

• Symmetric uses the same key for encryption and decryption, asymmetric uses different keys

• Symmetric is used for signing, asymmetric is used for encryption

• Symmetric uses two keys, asymmetric uses one key

• Symmetric is more secure than asymmetric

How are keysets created and managed with KeyczarTool?

• By using a public key infrastructure

• By generating random numbers

• By creating a directory and using KeyczarTool to populate it with keys

• By using a command-line program called KeyczarTool

What is the purpose of signing data in encryption and signing?

• To validate the source of data

• To prevent impersonation

• To establish secure connections

• To keep data secret

Why is it important to use secure random numbers in security operations?

• To improve user experience

• To increase network speed

• To ensure unpredictability in cryptographic operations

• To generate random data