The greatest weakness with symmetric algorithms is ____________.
Answer(s): B
The problem of key exchange https://en.wikipedia.org/wiki/Symmetric-key_algorithmSymmetric-key algorithms are algorithms for cryptography that use the same cryptographic keys for both encryption of plaintext and decryption of ciphertext. The keys may be identical or there may be a simple transformation to go between the two keys. The keys, in practice, represent a shared secret between two or more parties that can be used to maintain a private information link. This requirement that both parties have access to the secret key is one of the main drawbacks of symmetric key encryption, in comparison to public-key encryption (also known as asymmetric key encryption).
In IPSec, if the VPN is a gateway-gateway or a host-gateway, then which one of the following is true?
Answer(s): D
IPSec has two different modes: transport mode and tunnel mode. Only the tunnel mode can be used https://en.wikipedia.org/wiki/IPsecIn tunnel mode, the entire IP packet is encrypted and authenticated. It is then encapsulated into a new IP packet with a new IP header. Tunnel mode is used to create virtual private networks for network-to-network communications (e.g. between routers to link sites), host-to-network communications (e.g. remote user access) and host-to-host communications (e.g. private chat).Incorrect answers:Encapsulating Security Payload (ESP) authentication must be used. ESP in transport mode does not provide integrity and authentication for the entire IP packet. However, in Tunnel Mode, where the entire original IP packet is encapsulated with a new packet header added, ESP protection is afforded to the whole inner IP packet (including the inner header) while the outer header (including any outer IPv4 options or IPv6 extension headers) remains unprotected.IPSec does not involve gateways. Wrong.Only transport mode can be used. Transport mode, the default mode for IPSec, provides for end-to- end security. It can secure communications between a client and a server. When using the transport mode, only the IP payload is encrypted.
What is the formula m^e %n related to?
Encrypting with RSA https://en.wikipedia.org/wiki/RSA_(cryptosystem)RSA Encrypting a message m (number) with the public key (n, e) is calculated: M' := m^e %nIncorrect answers: Decrypting with RSA:M'' := m^d %nGeneration Mersenne primes: Mn = 2^n - 1Encrypting with Elliptic Curve (EC): y^2 = x^3 + ax + b
A real time protocol for verifying certificates (and a newer method than CRL).
Answer(s): A
Online Certificate Status Protocol (OCSP) https://en.wikipedia.org/wiki/Online_Certificate_Status_ProtocolThe Online Certificate Status Protocol (OCSP) is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate. It is described in RFC 6960 and is on the Internet standards track. It was created as an alternative to certificate revocation lists (CRL), specifically addressing certain problems associated with using CRLs in a public key infrastructure (PKI).Incorrect answers:Public Key Infrastructure (PKI) - set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption. The purpose of a PKI is to facilitate the secure electronic transfer of information for a range of network activities such as e-commerce, internet banking and confidential email. It is required for activities where simple passwords are an inadequate authentication method and more rigorous proof is required to confirm the identity of the parties involved in the communication and to validate the information being transferred.Registration Authority (RA) - сomponent of PKI that validates the identity of an entity requesting a digital certificate.Server-based Certificate Validation Protocol (SCVP) - Internet protocol for determining the path between an X.509 digital certificate and a trusted root (Delegated Path Discovery) and the validation of that path (Delegated Path Validation) according to a particular validation policy.
Which of the following is not a key size used by AES?
512 bitshttps://en.wikipedia.org/wiki/Advanced_Encryption_StandardAES is a subset of the Rijndael block cipher developed by two Belgian cryptographers, Vincent Rijmen and Joan Daemen, who submitted a proposal to NIST during the AES selection process. Rijndael is a family of ciphers with different key and block sizes. For AES, NIST selected three members of the Rijndael family, each with a block size of 128 bits, but three different key lengths: 128, 192 and 256 bits.
Share your comments for EC-Council 212-81 exam with other users:
really correct and good analyze!
excellent thanks a lot
will post once pass the cka exam
good content
q:32 answer has to be option c
nice questions
i really like the support team in this website. they are fast in communication and very helpful.
a good contemporary exam review
q23, its an array, isnt it? starts with [ and end with ]. its an array of objects, not object.
cool very helpfull
i just passed. this exam dumps is the same one from prepaway and examcollection. it has all the real test questions.
is this a valid prince2 practitioner dumps?
all are relatable questions
might help me to prepare for the exam
just paid and downlaod the 2 exams using the 50% sale discount. so far i was able to download the pdf and the test engine. all looks good.
i think it should be a,c. option d goes against the principle of building anything custom unless there are no work arounds available
very legible
is this exam accurate or helpful?
please upload dump, i have exam in 2 days
this is useful
question 232 answer should be perimeter not netowrk layer. wrong answer selected
hi team, could you please provide this dump ?
very helpful to clear the exam and understand the concept.
i think it is great that you are helping people when they need it. thanks.
cannot evaluate yet
a laptops wireless antenna is most likely located in the bezel of the lid
good examplae to learn basic
this is useful information
looks usefull
question 81 should be c.
question 18 : response isnt a ?
plaese add questions
is dumps still valid ?