Which of the following uses a secure crypto-processor to authenticate hardware devices such as a PC or laptop?

Which of the following uses a secure crypto-processor to authenticate hardware devices such as a PC or laptop?

a. Public key infrastructure
b. Full disk encryption
c. File-level encryption
d. Trusted Platform Module




Answer: D

Trusted Platform Module (TPM) refers to a secure crypto-processor used to authenticate hardware devices such as a PC or laptop. The idea behind TPM is to allow any encryption-enabled application to take advantage of the chip. Answer A is incorrect because public key infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates. Answer B is incorrect because full-disk encryption involves encrypting the operating system partition on a computer and then booting and running with the system drive encrypted at all times. Answer C is incorrect because in file- or folder-level encryption, individual files or folders are encrypted by the file system itself.

Which of the following is one of the biggest challenges associated with database encryption?

Which of the following is one of the biggest challenges associated with database encryption?

a. Multitenancy
b. Key management
c. Weak authentication components
d. Platform support



Answer: B


One of the biggest challenges associated with database encryption is key management. Answer A is incorrect because multitenancy is a security issue related to cloud computing implementations. Answer C is incorrect because lack of management software and weak authentication components are associated with hardware hard drive encryption. Answer D is incorrect because cost and platform support are concerns with smartphone encryption products.

One disadvantage of decentralized key generation is:

One disadvantage of decentralized key generation is:

a. It depends on key escrow.
b. It is more vulnerable to single point attacks.
c. There are more risks of attacks.
d. It creates a storage and management issue.




Answer: D

A disadvantage of decentralized key generation is the storage and management issue it creates.

Which of the following is an attack against the algorithm?

Which of the following is an attack against the algorithm?

a. Birthday attack
b. Weak key attack
c. Mathematical attack
d. Registration attack





Answer: C

A mathematical attack is an attack against the algorithm.

In a bridge trust model, each intermediate CA trusts only those CAs that are:

In a bridge trust model, each intermediate CA trusts only those CAs that are:

a. Above and below it
b. Above it
c. Below it
d. On the same level




Answer: A

In a bridge trust model, each intermediate CA trusts those CAs that are above and below it.

Which of the following is responsible for issuing certificates?

Which of the following is responsible for issuing certificates?

a. Registration authority (RA)
b. Certificate authority (CA)
c. Document authority (DA)
d. Local registration authority (LRA)





Answer: B

The certificate authority (CA) is responsible for issuing certificates.