2 cissp ® Official Study Guide Eighth Edition

A.
X.500
B.
X.509
C.
X.900
D.
X.905
13.
What cryptosystem provides the encryption/decryption technology for the commercial ver-
sion of Phil Zimmerman’s Pretty Good Privacy secure email system?
A.
ROT13
B.
IDEA
C.
ECC
D.
El Gamal
14.
What TCP/IP communications port is used by Transport Layer Security traffic?
A.
80
B.
220
C.
443
D.
559
15.
What type of cryptographic attack rendered Double DES (2DES) no more effective than 
standard DES encryption?
A.
Birthday attack
B.
Chosen ciphertext attack
C.
Meet-in-the-middle attack
D.
Man-in-the-middle attack
16.
Which of the following tools can be used to improve the effectiveness of a brute-force pass-
word cracking attack?
A.
Rainbow tables
B.
Hierarchical screening
C.
TKIP
D.
Random enhancement
17.
Which of the following links would be protected by WPA encryption?
A.
Firewall to firewall
B.
Router to firewall
C.
Client to wireless access point
D.
Wireless access point to router

---

274
Chapter 7 
■
PKI and Cryptographic Applications
18.
What is the major disadvantage of using certificate revocation lists?
A.
Key management
B.
Latency
C.
Record keeping
D.
Vulnerability to brute-force attacks
19.
Which one of the following encryption algorithms is now considered insecure?