Access Control
What are the two main types of access control?
Physical and logical
Fingerprints, iris scans, and Face ID are examples of authentication by what?
Characteristics (something you are)
Which cipher shifts every letter in the plaintext by a fixed number of positions?
Caesar cipher
What type of cryptography uses one shared secret key to both encrypt and decrypt?
Symmetric cryptography
Which access principle gives a user only the minimum permissions needed for their assigned work?
Least privilege
What are the 4 parts of access control?
Identification, authentication, authorization, and accountability
What type of password attack tries a list of common passwords?
Dictionary attack
What type of cipher is the Scytale, and what is its key?
Transposition cipher; the key is the diameter of the cylinder
Which symmetric algorithm is the modern encryption standard, using 128, 192, or 256-bit keys?
AES (Advanced Encryption Standard)
What is it called when a small change to a hash function's input changes many of the output bits?
Avalanche effect
Which access control model lets the resource owner decide who can access the resource?
Discretionary Access Control (DAC)
What is it called when one authentication provides access to multiple services?
Single Sign-On (SSO)
Which classical cipher is polyalphabetic and uses a keyword to apply multiple shifting alphabets?
Vigenère cipher
What is the random value added to a password before hashing to defend against rainbow table attacks?
Salt
Which access control model assigns access based on job role instead of identity?
Role-based Access Control
Which access control model uses sensitivity labels such as confidential, secret, and top secret?
Mandatory Access Control (MAC)
Typing rhythm, walking pattern, and mouse movements are examples of authentication by what?
Action (something you do)
Decrypt this Caesar cipher (shift 3): FUBSWRJUDSKB
CRYPTOGRAPHY
What method uses a hash and the sender's private key to provide integrity and nonrepudiation?
Digital signature
Which key exchange protocol is used to securely exchange symmetric keys?
Diffie-Hellman
"Assignments cannot be submitted after the due date" is an example of which access control model?
Rule-based Access Control
Which type of token uses a challenge/response method and does not need synchronization?
Asynchronous token
Decrypt this Vigenère cipher (keyword=KEY, where A=0): CIAEVC
SECURE
Alice wants to send Bob a confidential message and sign it. Which key (whose public or private) does Alice use to encrypt, and which does Bob use to decrypt? Which key does Alice use to sign, and which does Bob use to verify?
Encrypt: Bob's public key / Decrypt: Bob's private key
Sign: Alice's private key / Verify: Alice's public key
Which cryptanalysis attack is the hardest to perform?
Ciphertext-Only Attack (COA)