GSEC Cryptography Application — All Questions With Answers

Question 1

A security administrator is hardening an SSH server configuration file to protect sensitive administrative access. Which TWO configuration directives must be explicitly enforced to ensure strong cryptographic controls and prevent legacy weak encryption algorithms? (Choose two)

Accepted Answer

Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com. Modern SSH hardening requires disabling legacy ciphers and insecure MAC algorithms that are vulnerable to cryptographic collisions or plaintext recovery attacks. Enforcing robust encryption primitives and modern key exchange algorithms ensures that interactive shell sessions remain protected against advanced eavesdropping and active interception threats.

Answer

MACs hmac-md5,hmac-sha1

Answer

PubkeyAuthentication no

Answer

Cipher blowfish-cbc

Question 2

Refer to the exhibit. A security auditor is reviewing the configuration of a legacy signing service. Based on current cryptographic standards, why is this configuration flagged as a high-risk finding?

Accepted Answer

PKCS#1v1.5 is susceptible to padding oracle attacks.. RSA-1024 is no longer considered secure against modern computational capabilities, and PKCS#1v1.5 padding is susceptible to padding oracle attacks. This combination is insufficient for modern digital signatures, which require at least RSA-2048 and more secure padding schemes like PSS. Flagging this is critical because outdated cryptographic foundations allow attackers to forge signatures or perform factoring attacks, compromising the authenticity and non-repudiation of all documents signed by this service.

Answer

The key size is too large for the RSA algorithm, causing latency.

Answer

RSA should only be used for symmetric key storage.

Answer

The JSON format is not compatible with cryptographic standards.

Question 3

A security team is deploying an internal certificate authority (CA) to issue TLS certificates for microservices. They want to automate the enrollment process without manual approval, but the CA must ensure that any issued certificate cannot be used to sign other certificates. The team configures the CA to include the basicConstraints extension with CA:FALSE and pathlen:0. After issuance, a microservice attempts to use its certificate to sign a subordinate certificate. Which statement describes the outcome when a relying party validates the subordinate certificate?

Accepted Answer

The subordinate certificate is rejected because the issuer certificate lacks the CA:TRUE basicConstraints extension.. The microservice certificate is an end-entity certificate because its basicConstraints extension is set to CA:FALSE. When a relying party validates a certificate signed by this microservice, it checks the issuer's basicConstraints and finds that the issuer is not a CA. Therefore, the subordinate certificate is rejected. The pathlen constraint does not apply because the certificate is not a CA.

Answer

The subordinate certificate is rejected because the microservice certificate does not include the keyUsage extension with keyCertSign.

Answer

The subordinate certificate is accepted because the pathlen:0 constraint only limits the depth of the certificate chain, not the ability to sign.

Answer

The subordinate certificate is accepted because the microservice certificate includes a valid digital signature.

Question 4

A financial institution is implementing a digital signature solution for its internal document approval workflow. The security architect must select a cryptographic algorithm that provides non-repudiation and ensures that signatures cannot be forged even if an attacker obtains the public key. The institution also requires that the signature scheme be standardized by NIST and widely supported in commercial off-the-shelf (COTS) products. Which algorithm should the architect choose?

Accepted Answer

RSA with SHA-256. RSA with SHA-256 is a NIST-standardized digital signature algorithm that provides non-repudiation and is widely supported in commercial products. It uses a private key for signing and a public key for verification, so an attacker with the public key cannot forge signatures. ECDSA is also standardized but may have less ubiquitous support in older COTS environments, making RSA the better fit for broad compatibility.

Answer

AES-256-GCM

Answer

HMAC-SHA256

Answer

ECDSA with P-256 and SHA-256

Question 5

A security administrator is configuring encrypted backups for a remote office. The backup software supports AES-256 but requires a mode of operation that allows parallel processing of blocks and does not require the ciphertext to be padded to a multiple of the block size. The administrator must also ensure that identical plaintext blocks do not produce identical ciphertext blocks. Which mode should be selected?

Accepted Answer

Galois/Counter Mode (GCM). The backup software requires a mode that supports parallel block processing, avoids padding, and ensures identical plaintext blocks produce different ciphertext blocks. Galois/Counter Mode (GCM) meets all these criteria because it uses a counter-based keystream that can be parallelized and never repeats for a given key and IV. GCM also adds authentication, which strengthens backup integrity.

Answer

Output Feedback (OFB)

Answer

Electronic Codebook (ECB)

Answer

Cipher Block Chaining (CBC)

Question 6

A security engineer is deploying an encrypted backup appliance that will store archives for ten years. Management requires that the data remain confidential even if the encryption key is later compromised, and that the appliance never need to re-encrypt existing archives when keys are rotated. Which key management approach best meets these requirements?

Accepted Answer

Encrypt each archive with a randomly generated key that is itself encrypted under a key derived from a forward-secret key schedule, where the derivation key is deleted after each epoch so earlier epochs cannot be recomputed.. Forward secrecy protects data already protected by earlier keys: once an epoch's derivation secret is destroyed, no later compromise can recover it. Because every archive carries its own randomly generated encryption key, rotating the schedule never forces re-encryption of stored archives, and compromise of the current key exposes only the current epoch rather than the full ten-year history.

Answer

Derive a per-archive key from a single organization-wide master secret using PBKDF2 with a unique salt, and store the salt with each archive.

Answer

Encrypt each backup archive with a unique randomly generated data encryption key, wrap that key with a long-lived key-encryption key stored in a hardware security module, and store only the wrapped key alongside the archive.

Answer

Use a hybrid scheme: generate a random symmetric key per archive, encrypt the archive with it, then encrypt that key using an ephemeral asymmetric key pair whose private key is destroyed immediately after wrapping.

Question 7

A security engineer is deploying a new VPN concentrator that will use IPsec in tunnel mode. The engineer must ensure that the encryption algorithm provides both confidentiality and authenticity for each packet, and that the same key is never reused for encryption. Which combination of IPsec protocols should be configured?

Accepted Answer

ESP with AES-GCM. The requirement is for an IPsec encryption algorithm that provides both confidentiality and authenticity while avoiding key reuse for encryption. ESP with AES-GCM delivers authenticated encryption in one step, using a counter-based approach that ensures each packet is encrypted with a unique keystream as long as the IV is unique. This meets all criteria and is efficient.

Answer

AH with HMAC-SHA256

Answer

ESP with 3DES and HMAC-MD5

Answer

ESP with AES-CBC and HMAC-SHA256

Question 8

A security team must digitally sign firmware images so that devices can verify authenticity offline for years. The signing key will be kept in an HSM, and the team wants signatures that remain verifiable by devices that only support RSA and ECDSA and cannot perform large modular exponentiations quickly. Which signing approach should the team choose?

Accepted Answer

ECDSA over the NIST P-256 curve with SHA-256, because verification uses small elliptic-curve operations that are fast on constrained hardware.. ECDSA over P-256 delivers signatures that constrained devices can verify using small elliptic-curve operations instead of costly large-modulus exponentiations. Because the devices explicitly support RSA and ECDSA, ECDSA satisfies compatibility while the HSM safeguards the private signing key, giving offline verifiability without exposing the key.

Answer

A 1024-bit RSA signature with SHA-1, because the smaller modulus reduces the exponentiation cost while retaining legacy compatibility.

Answer

RSA-PSS with a 2048-bit modulus and SHA-256, because PSS provides provable security and is widely supported.

Answer

Ed25519 with SHA-512 internally, because it is deterministic and avoids the random nonce problem that affects ECDSA.

Question 9

A security engineer is implementing full-disk encryption on laptops using BitLocker. The organization requires that the encryption key be protected by a hardware module that validates the boot process before releasing the key. Which BitLocker configuration should be used?

Accepted Answer

TPM-only. The requirement is for hardware-based key protection with boot process validation. BitLocker's TPM-only mode uses the TPM to store the key and measure boot components, releasing the key only if the measurements are trusted. This provides seamless protection without additional user interaction, making it the correct choice for the stated scenario.

Answer

TPM + Startup Key

Answer

Password only

Answer

TPM + PIN

Question 10

A security administrator is configuring a new internal certificate authority (CA) to issue certificates for internal servers. The CA must ensure that certificates can be revoked if a private key is compromised, and that clients can verify the revocation status without directly contacting the CA. Which two mechanisms should be implemented? (Choose two.)

Accepted Answer

OCSP Stapling. The CA must support revocation checking that does not require direct client contact with the CA. Certificate Revocation Lists (CRLs) can be downloaded and cached by clients, enabling offline verification. OCSP stapling allows the server to present a time-stamped OCSP response, so clients receive revocation status without contacting the CA. Together, these mechanisms provide efficient and scalable revocation checking.

Answer

Certificate Transparency (CT)

Answer

Online Certificate Status Protocol (OCSP)

Answer

Simple Certificate Enrollment Protocol (SCEP)

Question 11

A security engineer is configuring an OpenSSH server on a Linux bastion host. The organization's policy requires that the server accept only SSH keys that provide forward secrecy and are resistant to offline brute-force attacks. The engineer generates a new host key and must select the algorithm that best meets this requirement. Which algorithm should the engineer choose?

Accepted Answer

ecdsa-sha2-nistp256. The requirement is for an SSH key algorithm that provides forward secrecy and resistance to offline brute-force attacks. The only option that meets both is ecdsa-sha2-nistp256, which uses elliptic curve cryptography and SHA-256. It is a signature algorithm that can be used for host keys, and when combined with a modern key exchange like curve25519-sha256, it provides forward secrecy. The other options are either not forward secret or rely on weak algorithms like SHA-1 or 1024-bit DSA.

Answer

ssh-dss

Answer

diffie-hellman-group14-sha1

Answer

ssh-rsa

Question 12

A security engineer is designing an internal Public Key Infrastructure (PKI) and needs to issue a subordinate certificate authority (sub-CA) certificate. To prevent this sub-CA from accidentally or maliciously issuing certificates for unauthorized domains, what specific X.509 extension must be correctly configured?

Accepted Answer

Name Constraints extension configured with explicit permitted and excluded subtree subdirectories for domain namespaces.. Name Constraints restrict the namespace within which all subject names in certificates issued by the CA must reside. This crucial X.509 extension prevents a compromised subordinate CA from generating trusted certificates for domains outside its permitted organizational scope, thereby containing blast radius in enterprise PKI hierarchies.

Answer

Key Usage extension populated solely with Digital Signature, Non-Repudiation, and Key Encipherment flags.

Answer

Authority Information Access extension pointing directly to the organization's primary online OCSP responder.

Answer

Extended Key Usage extension restricted strictly to TLS Web Server Authentication and Code Signing.

Question 13

An organization is implementing TLS 1.3 for a new customer portal. During the cipher suite negotiation phase, the security engineer needs to ensure that perfect forward secrecy is maintained for all incoming sessions. Which underlying key exchange mechanism should be prioritized in the configuration?

Accepted Answer

Elliptic Curve Diffie-Hellman Ephemeral. Perfect forward secrecy ensures that session keys are not compromised even if the primary private key of the server is compromised in the future. Ephemeral Diffie-Hellman guarantees this by generating unique per-session parameters that are never stored persistently on disk. Proper enforcement prevents long-term bulk decryption of historical intercepted traffic.

Answer

RSA key transport mechanism

Answer

Pre-Shared Key authentication mode

Answer

Static Diffie-Hellman key agreement

Question 14

A security analyst is hardening a web server to ensure that only modern, secure protocols are used for HTTPS traffic. Which configuration best aligns with GSEC security standards for data in transit?

Accepted Answer

Disable SSL and TLS 1.0/1.1, allowing only TLS 1.2 and 1.3.. Disabling legacy protocols like SSLv3 and TLS 1.0 is essential to prevent downgrade attacks like POODLE. By mandating TLS 1.2 or higher, the organization ensures that cryptographic primitives remain robust against known vulnerabilities. This practice is foundational for GSEC-compliant environments, as it mitigates the risk of man-in-the-middle interception where outdated handshake mechanisms allow attackers to force the use of weaker, exploitable encryption algorithms during the initial connection setup.

Answer

Support TLS 1.0, 1.1, and 1.2 to maintain maximum backward compatibility.

Answer

Enable SSLv3 for clients who cannot support newer TLS versions.

Answer

Use RC4 for all connections to ensure high performance over low-bandwidth links.

Question 15

An organization needs to encrypt a database of PII. The requirements state that the encryption must be reversible by authorized staff and provide data integrity. Which implementation should the security engineer recommend?

Accepted Answer

Implement AES-256 in GCM mode.. Using AES-256 in GCM mode provides both confidentiality and authenticity. Symmetric encryption is appropriate for database encryption where authorized entities hold the decryption keys. GCM mode is preferred because it acts as an Authenticated Encryption with Associated Data (AEAD) algorithm, preventing unauthorized modification of the ciphertext. This is critical for database security, where verifying that data has not been tampered with is as important as preventing unauthorized disclosure of the stored information.

Answer

Use SHA-256 hashing for all database fields.

Answer

Use RSA-4096 for encrypting large datasets.

Answer

Apply XOR-based encryption with a static global key.

Question 16

Which TWO of the following are primary functions of a Public Key Infrastructure (PKI)?

Accepted Answer

Issuance of digital certificates to verify identity.. PKI is vital for managing the lifecycle of digital certificates, ensuring trust in identity. By providing mechanisms for issuance and revocation, PKI allows entities to communicate securely without pre-existing trust. Understanding these functions is essential for GSEC professionals to manage authentication and secure communication channels effectively within an enterprise architecture, preventing the use of expired or fraudulent credentials that could be exploited by malicious actors during network sessions.

Answer

Centralized distribution of symmetric keys.

Answer

Hardware-level encryption for disk storage.

Answer

Real-time traffic flow monitoring and alerting.

Question 17

When selecting a cryptographic hash function for verifying file integrity, which property is most important to ensure that an attacker cannot create two different files that produce the same hash value?

Accepted Answer

Collision resistance.. Collision resistance is the property of a hash function that makes it computationally infeasible to find two distinct inputs that result in the same output hash. This is critical for integrity verification; if an attacker could generate a malicious file with the same hash as a legitimate file, they could bypass security controls, leading to the execution of arbitrary, potentially malicious code while the system assumes the file is authentic and untampered.

Answer

Pre-image resistance.

Answer

Reversibility.

Answer

High computational speed.

Question 18

A security analyst is reviewing a legacy application that uses RSA for digital signatures. The application generates a 1024-bit RSA key pair and signs messages using SHA-1. The analyst must recommend an upgrade that maintains the same algorithm family but meets current security standards. Which change should be recommended?

Accepted Answer

Increase the RSA key size to 2048 bits and replace SHA-1 with SHA-256.. To meet current security standards while preserving the RSA algorithm family, the analyst should recommend increasing the RSA key size to 2048 bits and replacing SHA-1 with SHA-256. This addresses both the weak key length and the deprecated hash function, providing a secure and compliant digital signature solution without changing the underlying public-key algorithm.

Answer

Keep the 1024-bit RSA key but replace SHA-1 with SHA-3.

Answer

Replace RSA with HMAC-SHA256 for signing.

Answer

Switch to Elliptic Curve Digital Signature Algorithm (ECDSA) with P-256 and SHA-256.

Question 19

A security administrator is configuring a VPN concentrator to protect data in transit. The requirement is that each VPN session use a unique symmetric key, and that compromise of one session key never reveal another session's key or the long-term authentication secret. Which property must the key exchange provide?

Accepted Answer

Perfect forward secrecy, so that each session key is derived independently and compromise of one does not expose others or the long-term secret.. Perfect forward secrecy uses ephemeral key agreement such as Diffie-Hellman with per-session values, so the long-term authentication secret never encrypts session keys directly. Even if one session key is later compromised, the ephemeral secrets needed to derive other sessions have been erased, and the long-term secret remains protected.

Answer

Key encapsulation, so that the long-term secret directly encrypts each session key and guarantees confidentiality of the exchange.

Answer

Collision resistance, so that two different sessions cannot produce the same derived key material during the handshake.

Answer

Non-repudiation, so that each VPN endpoint can prove it participated in the session and cannot deny sending traffic.

Question 20

A security analyst is reviewing how a file encryption tool protects data at rest on employee laptops. The tool must ensure that an attacker who copies the encrypted file cannot decrypt it without also obtaining the user's passphrase, and that modification of the ciphertext is detectable. Which TWO design elements should the analyst verify are present? (Choose two.)

Accepted Answer

A password-based key derivation function with a unique random salt and a high iteration count is used to derive the file encryption key.. A salted, high-iteration KDF makes passphrase guessing expensive and prevents cross-file precomputation, while authenticated encryption binds a tag to the ciphertext so any modification is detected. Together they ensure a copied file cannot be decrypted without the passphrase and that tampering is evident.

Answer

The file is encrypted with a stream cipher using a nonce that is reused across all files for simplicity.

Answer

A static initialization vector equal to the file creation timestamp is used for every encryption operation to ensure reproducibility.

Answer

The encryption key is embedded in the file header obfuscated with Base64 so the tool can decrypt without prompting the user.

GSEC Cryptography Application — All Questions With Answers

A security administrator is hardening an SSH server configuration file to protect sensitive administrative access. Which TWO configuration directives must be explicitly enforced to ensure strong cryptographic controls and prevent legacy weak encryption algorithms? (Choose two)

Refer to the exhibit. A security auditor is reviewing the configuration of a legacy signing service. Based on current cryptographic standards, why is this configuration flagged as a high-risk finding?

Exhibit

A security engineer is implementing full-disk encryption on laptops using BitLocker. The organization requires that the encryption key be protected by a hardware module that validates the boot process before releasing the key. Which BitLocker configuration should be used?

A security analyst is hardening a web server to ensure that only modern, secure protocols are used for HTTPS traffic. Which configuration best aligns with GSEC security standards for data in transit?

An organization needs to encrypt a database of PII. The requirements state that the encryption must be reversible by authorized staff and provide data integrity. Which implementation should the security engineer recommend?

Which TWO of the following are primary functions of a Public Key Infrastructure (PKI)?

When selecting a cryptographic hash function for verifying file integrity, which property is most important to ensure that an attacker cannot create two different files that produce the same hash value?

A security engineer is selecting a hash function to protect stored user passwords in a new application. The threat model assumes an attacker who steals the password database and has substantial GPU resources for offline cracking. Which choice best addresses this threat?

GSEC Cryptography Application — All Questions With Answers

A security administrator is hardening an SSH server configuration file to protect sensitive administrative access. Which TWO configuration directives must be explicitly enforced to ensure strong cryptographic controls and prevent legacy weak encryption algorithms? (Choose two)

Refer to the exhibit. A security auditor is reviewing the configuration of a legacy signing service. Based on current cryptographic standards, why is this configuration flagged as a high-risk finding?

Exhibit

A security engineer is implementing full-disk encryption on laptops using BitLocker. The organization requires that the encryption key be protected by a hardware module that validates the boot process before releasing the key. Which BitLocker configuration should be used?

A security analyst is hardening a web server to ensure that only modern, secure protocols are used for HTTPS traffic. Which configuration best aligns with GSEC security standards for data in transit?

An organization needs to encrypt a database of PII. The requirements state that the encryption must be reversible by authorized staff and provide data integrity. Which implementation should the security engineer recommend?

Which TWO of the following are primary functions of a Public Key Infrastructure (PKI)?

When selecting a cryptographic hash function for verifying file integrity, which property is most important to ensure that an attacker cannot create two different files that produce the same hash value?

A security engineer is selecting a hash function to protect stored user passwords in a new application. The threat model assumes an attacker who steals the password database and has substantial GPU resources for offline cracking. Which choice best addresses this threat?