Cryptographic failure

Question 1

What is PII

Answer 1

Personal Identifiable Information

Question 2

If TLS is not enforced on all of a websites pages, an attacker could:

Answer 2

Downgrade connections from HTTPS to HTTP
Hijack an authenticated session
Alter transported data
Incept and decipher encrypted passwords

Question 3

True or False:
When storing passwords in a database, it is best practice to use unsalted hashes

Answer 3

False

Question 4

True or False:
Only data protected by regulations, such as GDPR or PCIDSS required cryptographic security

Answer 4

False

Question 5

Password should be stored with an algorithm such as:

Answer 5

SHA1, bcrypt, argon2

Question 6

True or False:
Sensitive data only requires encryption when it is at rest

Answer 6

False

Question 7

All application data should be classified if it is:

Answer 7

Stored, transmitted, or processed

Question 8

Common cryptographic failures include:

Answer 8

Poorly designed rainbow tables
Weak key generation
Using outdated cyphers

Question 9

Instead of compromising cryptographic techniques, attackers will:

Answer 9

Steal session keys
Attack TLS protocols
Execute man in the middle attacks
Steal clear text data from a server