Sec+ | 1.4 Encryptions | 701

This is a cryptographic technology that uses a key to convert plain text data into cipher text data. The data is transmitted as cipher text, and then once reaching its destination is reverted back to the original plain text form. The purpose of this technology is to ensure data is SECURE/PRIVATE/CONFIDENTIAL.

• Encryption

• Hash

• Salt

• Rainbow Table

A mathematical function that takes data of any size and produces a fixed-size string of characters, essentially acting like a unique "fingerprint" of that data. It is used to verify the integrity of information and detect any changes made to it.

• Publik Key Infrastructure (PKI)

• Encryption

• Key Stretching

• Hash

If an employee at IP Cyber is denied access to a file that they want to access, which part of the CIA triad is being enforced?

• Confidentiality

• Integrity

• Availability

If a threat actor breaks into our systems and is attempting to collect credential information (username/passwords) data from one of our databases, which of these cryptographic technologies would reduce the impact of their attack?

• Availability

• Hashing

• Backups

• Common Vulnerabilities and Exposures (CvE)

This is a a random string of data added to a password or other sensitive information before it is hashed to add complexity. It also helps an enterprise defeat a threat actors capability to use a rainbow table.

• Data Loss Prevention (DLP)

• Waterfall Model

• RFID Tokens

• Salting

This is a technique used to hide data in an image file.

• Data Tokenization

• Steganography

• Data Masking

• Encryption

Our company has a massive amount of sensitive customer data that has been archived. As a safety protocol, we have encrypted this data to ensure that it cannot be read by anyone who should not have access. What is the state of the data we are protecting?

• Data-in-Transit

• Data-at-Rest

• Data-in-Use

The policy of Least Privilege controls the amount of access rights employees have within our organization. What part of the CIA triad would this security control influence?

• Integrity

• Availability

• Confidentiality

IP Cyber is planning to allow employees to work from home (remote-work) and wants to ensure that when they connect to the companies resources, they are connecting through a secure medium that encrypts all traffic. They have chosen to use a Virtual Private Network (VPN). What state is the data that the employees are accessing through the VPN considered to be in?

• Data-at-Rest

• Data-in-Transit

• Data-in-Processing

IP Cyber is going to use Full Disk Encryption (FDE) on all employee-issued laptops to ensure all data on each laptop is as secure as possible in the event that a laptop is stolen. This means IP Cyber needs to store a copy of each employees keys somewhere. Where is a good place to store cryptographic keys for this purpose?

• Key Hole

• Key Exchange

• Key Escrow

• Key Agreement