20+ practice questions focused on Cryptography — one of the most tested topics on the Systems Security Certified Practitioner SSCP exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Cryptography PracticeA security team is evaluating hashing algorithms for use in a new system. Which of the following are considered currently secure for general use? (Select TWO)
Explanation: SHA-3 (C) is the latest member of the Secure Hash Algorithm family, standardized by NIST in FIPS 202. It is based on the Keccak sponge construction and is not susceptible to the collision attacks that weaken SHA-1 or the length-extension vulnerabilities of SHA-2, making it currently secure for general use.
An analyst is comparing symmetric and asymmetric encryption. Which statement accurately describes a typical use case?
Explanation: Asymmetric encryption (e.g., RSA, ECDH) is computationally expensive and slow, making it unsuitable for bulk data encryption. Instead, it is commonly used to securely exchange a symmetric session key (e.g., an AES key) over an insecure channel. Once both parties have the symmetric key, they can switch to symmetric encryption (e.g., AES-GCM) for efficient bulk data encryption. This hybrid approach combines the secure key distribution of asymmetric encryption with the speed of symmetric encryption.
Which of the following is a secure alternative to RC4 for stream ciphers?
Explanation: ChaCha20 is a modern, high-speed stream cipher designed by Daniel J. Bernstein as a secure alternative to RC4, which has known vulnerabilities such as biases in its keystream and susceptibility to attacks like the Fluhrer-Mantin-Shamir attack. ChaCha20 is standardized in RFC 8439 and is widely used in TLS 1.3 and SSH, offering strong security and performance without the weaknesses of RC4.
A security engineer is designing a system that requires non-repudiation of data origin. Which cryptographic technique should be used?
Explanation: Digital signatures using RSA or ECDSA provide non-repudiation of data origin because they bind the signer's identity to the data through a private key that only the signer possesses. The recipient can verify the signature with the corresponding public key, and the signer cannot later deny having signed the data, as the private key is uniquely under their control. This meets the legal and technical requirement for non-repudiation, unlike symmetric or hash-only methods.
An organization is planning to implement ECC for digital signatures. Which key size provides a security level equivalent to a 3072-bit RSA key?
Explanation: The National Institute of Standards and Technology (NIST) recommends that a 256-bit elliptic curve (e.g., P-256) provides a security strength of 128 bits, which is equivalent to a 3072-bit RSA key. This equivalence is based on the computational difficulty of the discrete logarithm problem in elliptic curve groups versus integer factorization, where ECC requires significantly smaller key sizes for the same security level.
+15 more Cryptography questions available
Practice all Cryptography questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Cryptography. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Cryptography questions on the SSCP frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Cryptography is tested as part of the Systems Security Certified Practitioner SSCP blueprint. Practicing with targeted Cryptography questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free SSCP practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Cryptography is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Cryptography practice session with instant scoring and detailed explanations.
Start Cryptography Practice →