SYO 701 CRYPTOGRAPHY Module FC-1

266. A software development team asked a security administrator to recommend techniques that should be used to reduce the chances of the software being reverse engineered. Which of the following should the security administrator recommend?

• A. Implementing strong encryption methods

• B. Performing code obfuscation

• C. Using a secure coding standard

• D. Conducting regular security audits

196. A systems administrator uses a key to encrypt a message being sent to a peer in a different branch office. The peer then uses the same key to decrypt the message. Which of the following describes this example?

• A. Symmetric

• B. Asymmetric

• C. Hashing

• D. Public Key

231. Which of the following security measures is required when using a cloud-based platform for IoT management?

• A. Encrypted connection

• B. Open connection

• C. Unsecured API access

• D. Plain text communication

275. Which of the following considerations is the most important regarding cryptography used in an IoT device?

• A. Resource constraints

• B. User interface design

• C. Data storage capacity

• D. Network speed

360. A security administrator recently reset local passwords and the following values were recorded in the system: Which of the following in the security administrator most likely protecting against?

• A. SQL injection attacks

• B. Cross-site scripting (XSS)

• C. Pass-the-hash attacks

• D. Denial of Service (DoS) attacks

208. An organization wants to limit potential impact to its log-in database in the event of a breach. Which of the following options is the security team most likely to recommend?

• A. Encrypting

• B. Hashing

• C. Backing up

• D. Tokenization

333. A security administrator identifies an application that is storing data using MD5. Which of the following best identifies the vulnerability likely present in the application?

• A. Cryptographic

• B. Network

• C. Application Logic

• D. Configuration

298. A security administrator is performing an audit on a stand-alone UNIX server, and the following message is immediately displayed: (Error 13): /etc/shadow: Permission denied. Which of the following best describes the type of tool that is being used?

• A. Network scanner

• B. Vulnerability assessment tool

• C. File integrity checker

• D. Password cracker

6. Which of the following describes the process of concealing code or text inside a graphical image?

• A. Cryptography

• B. Data Compression

• C. Steganography

• D. Encoding

349. In which of the following scenarios is tokenization the best privacy technique to use?

• A. Allowing users to share their personal data with third parties

• B. Storing sensitive information in plain text for easy access

• C. Enabling established customers to safely store credit card Information

• D. Using encryption to protect data during transmission