John wants to send Marie an email that includes sensitive information, and he does not trust the network that he is connected to. Marie gives him the idea of using PGP. What should John do to communicate correctly using this type of encryption?

1. A. Use his own public key to encrypt the message.
2. B. Use Marie's public key to encrypt the message.
3. C. Use his own private key to encrypt the message.
4. D. Use Marie's private key to encrypt the message.

Correct Answer: B
When a user encrypts plaintext with PGP, PGP first compresses the plaintext. The session key works with a very secure, fast conventional encryption algorithm to encrypt the plaintext; the result is ciphertext. Once the data is encrypted, the session key is then encrypted to the recipient's public key

In the field of cryptanalysis, what is meant by a “rubber-hose” attack?

1. A. Forcing the targeted keystream through a hardware-accelerated device such as an ASIC.
2. B. A backdoor placed into a cryptographic algorithm by its creator.
3. C. Extraction of cryptographic secrets through coercion or torture.
4. D. Attempting to decrypt ciphertext by making logical assumptions about the contents of the original plaintext.

Correct Answer: C

Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal?

1. A. har.txt
2. B. SAM file
3. C. wwwroot
4. D. Repair file

Correct Answer: B

John, a security analyst working for an organization, found a critical vulnerability on the organization's LAN that allows him to view financial and personal information about the rest of the employees. Before reporting the vulnerability, he examines the information shown by the vulnerability for two days without disclosing any information to third parties or other internal employees. He does so out of curiosity about the other employees and may take advantage of this information later. What would John be considered as?

1. A. Cybercriminal
2. B. Black hat
3. C. White hat
4. D. Gray hat

Correct Answer: D

Websites and web portals that provide web services commonly use the Simple Object Access Protocol (SOAP).
Which of the following is an incorrect definition or characteristics of the protocol?

1. A. Exchanges data between web services
2. B. Only compatible with the application protocol HTTP
3. C. Provides a structured model for messaging
4. D. Based on XML

Correct Answer: B