{{asɛmtiNe Ɔkyerɛwfo}} | Nhomakorabea | Nneɛma a ɛma wotumi yɛ ade

1

A student says, “We should just use asymmetric encryption for everything since it’s more secure.” Why is this not how real systems typically work?

Asymmetric encryption does not use keys

Asymmetric encryption only works on small devices

Asymmetric encryption is too slow for large amounts of data

Asymmetric encryption cannot encrypt data

1

Two computers are communicating securely over the internet. What is the first step in setting up a secure session?

The sender generates a public key for the receiver

The sender uses the receiver’s public key to encrypt a session key

They immediately begin sending encrypted messages with symmetric encryption

The sender generates a session key and shares it openly

1

A user wants to send a large file quickly and securely. Which approach is most appropriate?

Send the file without encryption and add a password later

Use symmetric encryption only without any key sharing

Use asymmetric encryption to share a session key, then symmetric encryption for the file

Use asymmetric encryption for the entire file

1

What is the main purpose of asymmetric encryption in modern secure communication?

To encrypt all messages quickly

To store messages permanently

To replace symmetric encryption entirely

To securely share a symmetric key

1

A session key is best described as:

A temporary symmetric key used during a session

A public key shared with all users

A permanent key used for all communications

A key used only by attackers

1

During a secure session, what type of encryption is used to protect most of the data being transmitted?

Symmetric encryption

Asymmetric encryption

Hashing

No encryption is used

1

Why is symmetric encryption preferred for encrypting actual data?

It does not require a key

It is more secure than asymmetric encryption

It cannot be broken

It is faster and more efficient

1

A company uses asymmetric encryption to send a session key. What happens next?

The session ends immediately

The private key is shared with users

The system switches to symmetric encryption for communication

The public key is deleted

1

What is a session in secure communication?

A permanent connection between two computers

A public key exchange process

A type of encryption algorithm

A time-limited series of data exchanges between two parties

1

A session key is used for how long?

Until the user logs out once

Until the system is restarted

Forever

Only for the duration of a session

1

What happens when a session expires?

The public key is deleted

The encryption algorithm changes automatically

The attacker gains access to the data

The session key becomes invalid

1

Why is session expiration important for security?

It prevents attackers from using old session keys

It makes encryption faster

It allows keys to be reused

It eliminates the need for encryption

1

If no messages are sent for a period of time, what will likely happen to the session?

It automatically encrypts more data

It becomes permanent

It switches to asymmetric encryption

It expires

1

A developer forgets to expire session keys. What is the biggest risk?

Messages will not send

Encryption will become faster

Attackers may reuse old session keys to access data

Public keys will stop working

1

Which of the following correctly describes the order of operations in secure communication?

Symmetric encryption → send message → generate keys

Asymmetric encryption → share session key → symmetric encryption for data

Symmetric encryption → asymmetric encryption → send message

Generate session key → send message without encryption

1

Which algorithm is an example of asymmetric encryption?

MD5

RSA

AES

SHA-256

1

Elliptic Curve Cryptography (ECC) is best described as:

A type of asymmetric encryption

A data compression method

A type of symmetric encryption

A hashing algorithm

1

Asymmetric encryption is commonly used in which of the following applications?

Digital signatures and certificates

Data storage only

Image editing

File compression

1

A student wants to encrypt a file using a command line tool. Which tool could they use?

A text editor

A spreadsheet program

A web browser only

A command line tool like OpenSSL

1

What is the purpose of generating a key pair in a command line environment?

To create a public and private key for encryption and decryption

To speed up internet connections

To delete encrypted files

To compress files

1

A user runs a command to generate a key pair. What will be created?

A hash and a certificate

A symmetric key and a password

A public key and a private key

Two identical public keys

1

A file is encrypted using a public key. Which key is needed to decrypt it?

The matching private key

A symmetric key

Another public key

Any available key

1

Which command line action would allow a user to share their public key?

Decrypting a message

Extracting the public key from the key pair

Deleting the private key

Encrypting a file

1

A student encrypts a file using a public key but cannot decrypt it. What is the most likely reason?

They must use symmetric encryption instead

They need the matching private key

They need a longer key

They are using the wrong encryption algorithm

AP Cybersecurity: 5.4B - CFUs

AP Cybersecurity: 5.4B - CFUs

A student says, “We should just use asymmetric encryption for everything since it’s more secure.” Why is this not how real systems typically work?

Two computers are communicating securely over the internet. What is the first step in setting up a secure session?

A user wants to send a large file quickly and securely. Which approach is most appropriate?

What is the main purpose of asymmetric encryption in modern secure communication?

A session key is best described as:

During a secure session, what type of encryption is used to protect most of the data being transmitted?

Why is symmetric encryption preferred for encrypting actual data?

A company uses asymmetric encryption to send a session key. What happens next?

What is a session in secure communication?

A session key is used for how long?

What happens when a session expires?

Why is session expiration important for security?

If no messages are sent for a period of time, what will likely happen to the session?

A developer forgets to expire session keys. What is the biggest risk?

Which of the following correctly describes the order of operations in secure communication?

Which algorithm is an example of asymmetric encryption?

Elliptic Curve Cryptography (ECC) is best described as:

Asymmetric encryption is commonly used in which of the following applications?

A student wants to encrypt a file using a command line tool. Which tool could they use?

What is the purpose of generating a key pair in a command line environment?

A user runs a command to generate a key pair. What will be created?

A file is encrypted using a public key. Which key is needed to decrypt it?

Which command line action would allow a user to share their public key?

A student encrypts a file using a public key but cannot decrypt it. What is the most likely reason?

A student says, “We should just use asymmetric encryption for everything since it’s more secure.” Why is this not how real systems typically work?

Two computers are communicating securely over the internet. What is the first step in setting up a secure session?

A user wants to send a large file quickly and securely. Which approach is most appropriate?

What is the main purpose of asymmetric encryption in modern secure communication?

A session key is best described as:

During a secure session, what type of encryption is used to protect most of the data being transmitted?

Why is symmetric encryption preferred for encrypting actual data?

A company uses asymmetric encryption to send a session key. What happens next?

What is a session in secure communication?

A session key is used for how long?

What happens when a session expires?

Why is session expiration important for security?

If no messages are sent for a period of time, what will likely happen to the session?

A developer forgets to expire session keys. What is the biggest risk?

Which of the following correctly describes the order of operations in secure communication?

Which algorithm is an example of asymmetric encryption?

Elliptic Curve Cryptography (ECC) is best described as:

Asymmetric encryption is commonly used in which of the following applications?

A student wants to encrypt a file using a command line tool. Which tool could they use?

What is the purpose of generating a key pair in a command line environment?

A user runs a command to generate a key pair. What will be created?

A file is encrypted using a public key. Which key is needed to decrypt it?

Which command line action would allow a user to share their public key?

A student encrypts a file using a public key but cannot decrypt it. What is the most likely reason?