SSCP Cryptography Fundamentals Quiz

1. In TLS/SSL, the handshake process primarily establishes which of the following?

A permanent connection without encryption

Authentication and a shared session key

Only the server's identity

Direct access to plaintext data

2. What is a major security consideration when implementing cryptography in applications?

Using the weakest available algorithm for speed

Proper key management and secure storage of cryptographic materials

Hardcoding encryption keys in source code

Avoiding authentication mechanisms

3. Which cryptographic protocol is used to secure email communications and relies on public key cryptography?

HTTP

S/MIME (Secure/Multipurpose Internet Mail Extensions)

FTP

SNMP

4. In cryptography, what does the term 'collision' refer to?

A network connection error

Two different inputs producing the same hash output

Incompatible encryption algorithms

Loss of data during encryption

5. What is the primary purpose of a key derivation function (KDF)?

To generate multiple cryptographic keys from a single source

To delete old encryption keys

To encrypt data without using keys

To verify digital signatures

6. Which of the following is a characteristic of stream ciphers?

They encrypt fixed-size blocks of plaintext

They encrypt one bit or byte at a time

They require longer keys than block ciphers

They are slower than block ciphers

7. In cryptographic key rotation, how often should encryption keys typically be changed?

Never; keys should remain constant

Only when a breach is suspected

Regularly according to organizational policy

Every time data is encrypted

8. What does a message authentication code (MAC) provide?

Confidentiality only

Authentication and integrity verification

Compression of data

Key generation and storage

9. Which algorithm is commonly used for secure key exchange and is based on elliptic curve mathematics?

3DES

ECDH (Elliptic Curve Diffie-Hellman)

HMAC

Blowfish

10. What is the main difference between encryption and encoding?

Encryption uses keys; encoding does not require a secret key

Encoding is stronger than encryption

They serve identical purposes

Encryption is only for audio files

11. Which encryption algorithm is a symmetric block cipher that uses 128-bit blocks and key sizes of 128, 192, or 256 bits?

AES (Advanced Encryption Standard)

RSA

DES (Data Encryption Standard)

Diffie-Hellman

12. What does perfect forward secrecy (PFS) ensure in cryptographic protocols?

Session keys remain secure even if long-term keys are compromised

All encryption keys are identical

No key exchange is needed between parties

Symmetric and asymmetric keys are the same

13. Which mode of operation encrypts each plaintext block independently?

CBC (Cipher Block Chaining)

ECB (Electronic Codebook)

CTR (Counter mode)

GCM (Galois/Counter Mode)

14. What is the main purpose of a certificate authority (CA) in PKI?

To encrypt all network traffic

To verify identities and issue digital certificates

To generate private keys for users

To store encrypted data on servers

15. Which cryptographic hash function produces a 256-bit output?

MD5

SHA-1

SHA-256

SHA-512

16. In the Diffie-Hellman key exchange, what is NOT transmitted over an insecure channel?

Prime numbers and generators

Public key components

The shared secret key

Negotiation parameters

17. What is the primary weakness of the DES (Data Encryption Standard) algorithm?

It uses asymmetric encryption

Its 56-bit key size is too small for modern security

It requires more processing power than AES

It cannot encrypt large files

18. Which key management practice is most critical to prevent unauthorized access to encrypted data?

Using the same key for all users

Storing keys in plaintext for quick access

Securing keys in hardware security modules (HSMs)

Publishing all keys on a public server

19. What does a digital signature provide in cryptographic communications?

Confidentiality and compression

Authentication, non-repudiation, and integrity

Speed and reduced bandwidth usage

Automatic key regeneration

20. In asymmetric cryptography, what is the primary purpose of the private key?

To encrypt messages sent to the key owner

To decrypt messages and create digital signatures

To be shared publicly with all parties

To establish symmetric key agreements only