Access Control & Cryptography

Access Control

100

What are the two main types of access control?

Physical and logical

200

What are the 4 parts of access control?

Identification, authentication, authorization, and accountability

300

Which access control model lets the resource owner decide who can access the resource?

Discretionary Access Control (DAC)

400

Which access control model uses sensitivity labels such as confidential, secret, and top secret?

Mandatory Access Control (MAC)

500

"Assignments cannot be submitted after the due date" is an example of which access control model?

Rule-based Access Control

Authentication

100

Fingerprints, iris scans, and Face ID are examples of authentication by what?

Characteristics (something you are)

200

What type of password attack tries a list of common passwords?

Dictionary attack

300

What is it called when one authentication provides access to multiple services?

Single Sign-On (SSO)

400

Typing rhythm, walking pattern, and mouse movements are examples of authentication by what?

Action (something you do)

500

Which type of token uses a challenge/response method and does not need synchronization?

Asynchronous token

Classical Ciphers

100

Which cipher shifts every letter in the plaintext by a fixed number of positions?

Caesar cipher

200

What type of cipher is the Scytale, and what is its key?

Transposition cipher; the key is the diameter of the cylinder

300

Which classical cipher is polyalphabetic and uses a keyword to apply multiple shifting alphabets?

Vigenère cipher

400

Decrypt this Caesar cipher (shift 3): FUBSWRJUDSKB

CRYPTOGRAPHY

500

Decrypt this Vigenère cipher (keyword=KEY, where A=0): CIAEVC

SECURE

Modern Cryptography

100

What type of cryptography uses one shared secret key to both encrypt and decrypt?

Symmetric cryptography

200

Which symmetric algorithm is the modern encryption standard, using 128, 192, or 256-bit keys?

AES (Advanced Encryption Standard)

300

What is the random value added to a password before hashing to defend against rainbow table attacks?

Salt

400

What method uses a hash and the sender's private key to provide integrity and nonrepudiation?

Digital signature

500

Alice wants to send Bob a confidential message and sign it. Which key (whose public or private) does Alice use to encrypt, and which does Bob use to decrypt? Which key does Alice use to sign, and which does Bob use to verify?

Encrypt: Bob's public key / Decrypt: Bob's private key
Sign: Alice's private key / Verify: Alice's public key

Random

100

Which access principle gives a user only the minimum permissions needed for their assigned work?

Least privilege

200

What is it called when a small change to a hash function's input changes many of the output bits?

Avalanche effect

300

Which access control model assigns access based on job role instead of identity?

Role-based Access Control

400

Which key exchange protocol is used to securely exchange symmetric keys?

Diffie-Hellman

500

Which cryptanalysis attack is the hardest to perform?

Ciphertext-Only Attack (COA)