Information Security Management Examination (SG) | Section A Cryptography, Authentication and Controls 03
Problem 1 ・ Question 1 / 10
Which is a characteristic of symmetric-key cryptography?
View explanation
With symmetric-key cryptography the sender and receiver must share the same key securely.
Problem 1 ・ Question 2 / 10
In public-key cryptography, which encryption ensures that only the recipient can decrypt?
View explanation
Data encrypted with the recipient's public key is decrypted with the matching private key.
Problem 1 ・ Question 3 / 10
Which is an appropriate use of a hash function?
View explanation
Comparing hash values computed from the original data confirms integrity.
Problem 1 ・ Question 4 / 10
Which key is normally used to verify a digital signature?
View explanation
A signature created with the signer's private key is verified with the signer's public key.
Problem 1 ・ Question 5 / 10
Which authentication combines a password with a fingerprint?
View explanation
It uses different factors — something you know and something you are — so it is multi-factor authentication.
Problem 1 ・ Question 6 / 10
Which mechanism lets a user access several permitted services after authenticating once?
View explanation
Single sign-on gives access to several linked services after one authentication.
Problem 1 ・ Question 7 / 10
Which device permits or denies traffic according to rules at the boundary between the external and internal networks?
View explanation
A firewall controls traffic on the basis of source, destination, port and so on.
Problem 1 ・ Question 8 / 10
Which mechanism detects suspicious traffic and blocks it automatically where necessary?
View explanation
An IPS detects intrusions and also defends, for example by blocking the traffic.
Problem 1 ・ Question 9 / 10
Which mechanism inspects the content of HTTP traffic for attacks on web applications?
View explanation
A WAF defends against attacks on the web application layer such as SQL injection.
Problem 1 ・ Question 10 / 10
Which mechanism continuously monitors the behaviour of endpoints and supports detection of and response to compromise?
View explanation
EDR records and analyses endpoint activity and supports the detection of and response to threats.
Result
More sets in this exam
- Information Security Management Examination (SG) | Section A Security Fundamentals 01
- Information Security Management Examination (SG) | Section A Threats and Attack Techniques 02
- Information Security Management Examination (SG) | Section A Risk and Access Management 05
- Information Security Management Examination (SG) | Section A Attack Mitigation and Business Continuity 06
- Information Security Management Examination (SG) | Section A Security Properties and Design Principles Questions 07
- Information Security Management Examination (SG) | Section A Risk Treatment, Supplier, and Incident Management Questions 08