CSF Additional Quiz - Chapter 4

What is the primary purpose of cryptography?

• To create secret codes for historical documents

• To control access to buildings and rooms

• To encrypt or decrypt information for secure storage and transmission

• To generate one-time passwords for authentication

Which encryption method uses the same key for both encryption and decryption?

• Asymmetric key cryptography

• Transposition

• Symmetric key cryptography

• Public-key encryption

What is the main difference between symmetric and asymmetric encryption?

• Symmetric encryption is faster but less secure than asymmetric encryption

• Asymmetric encryption uses the same key for both encryption and decryption

• Symmetric encryption uses a pair of unrelated keys

• Asymmetric encryption is more efficient for encrypting large blocks of data

Which encryption algorithm is commonly used in the electronic payment industry?

• AES

• RSA

• 3DES

• Blowfish

What is the purpose of a virtual private network (VPN)?

• To encrypt messages using the Caesar cipher

• To control access to a building or system

• To provide online privacy and anonymity by creating a secure connection

• To generate one-time passwords for authentication

What does Physical Access Control primarily focus on?

• Authenticating users

• Restricting access to physical spaces

• Managing data encryption

• Monitoring network traffic

Which of the following is an example of Logical Access Control?

• Security alarms

• Motion detectors

• Password-coded doors

• Fob-controlled gates

What is the main purpose of Role-Based Access Control (RBAC)?

• Controlling physical access

• Assigning permissions based on job functions

• Restricting access to network traffic

• Implementing security audits

In the context of access control, what does Identification involve?

• Checking user credentials

• Determining access authorization

• Tracing user activity

• Establishing rules for security policies

What does Authentication, Authorization, and Accounting (AAA) primarily contribute to in network management and cybersecurity?

• Physical access control

• Managing data encryption

• Screening users, enforcing policies, and auditing usage

• Implementing security alarms