SkillTestPro | CCNP Security 350-701 SCOR Practice Test 1

CCNP Security 350-701 SCOR Practice Test 1 (Hard) - Cryptography Fundamentals - Symmetric, Asymmetric, and Hashing

CISCO CCNP Security Exam Logo

1 / 10

Which cryptographic approach uses the same secret key for both encryption and decryption, making key distribution a primary challenge?

Asymmetric encryption

Hashing

Symmetric encryption

Digital signatures using only a public key

Certificate revocation checking

Key derivation via a one-way function with no key at all

2 / 10

Which cryptographic function takes an input of any size and produces a fixed-length output, and is designed so that even a tiny change in input produces a drastically different output?

An asymmetric key exchange algorithm

A VPN tunnel's negotiated encryption algorithm name

A digital certificate's expiration timestamp

A network switch's MAC address table

A symmetric block cipher operating in ECB mode only

A cryptographic hash function

3 / 10

Which statement correctly describes the relationship between a public key and a private key in asymmetric cryptography?

Both keys must always be transmitted together over the network for encryption to work, though this depends heavily on which specific vendor implementation is deployed, a determination that several security frameworks treat as a secondary consideration

The public key and private key are identical and interchangeable in every operation

The private key must be distributed publicly while the public key is kept secret

Data encrypted with the public key can only be decrypted with the corresponding private key, and the private key must be kept secret while the public key can be freely distributed

The public key is used only for hashing, never for encryption

Asymmetric cryptography requires no key pair at all, only a shared passphrase

4 / 10

Why is symmetric encryption generally preferred over asymmetric encryption for bulk data encryption in a VPN tunnel, once the tunnel is established?

Symmetric encryption requires no key at all, making it inherently more secure

Symmetric encryption is immune to all forms of cryptanalysis

Asymmetric encryption cannot mathematically encrypt more than one byte of data

Symmetric encryption automatically authenticates the identity of both endpoints with no additional protocol, under the organization's default security policy before any custom tuning is applied

Asymmetric encryption is illegal to use for network traffic in most countries

Symmetric encryption is computationally faster and more efficient for encrypting large volumes of data compared to asymmetric encryption

5 / 10

Which cryptographic property ensures that two different inputs are extremely unlikely to produce the same hash output, which is critical for the integrity guarantees hashing provides?

Key escrow

Port address translation

Split tunneling

Collision resistance

Certificate pinning

Perfect forward secrecy

6 / 10

Which cryptographic technique combines a secret key with a hash function to provide both data integrity verification and authentication of the message's origin?

A standard TCP checksum calculation

Simple Base64 encoding of the message

A plain, unkeyed hash function with no secret involved

A DNS TXT record verification

A certificate revocation list (CRL) lookup

Hash-based Message Authentication Code (HMAC)

7 / 10

Which scenario best illustrates an appropriate real-world use of asymmetric cryptography rather than symmetric cryptography?

Compressing a file to reduce its storage size

Two parties who have never previously communicated need to securely establish a shared secret key over an untrusted network without a pre-shared key

Sorting a list of IP addresses in ascending order

Performing a routine backup verification checksum with no confidentiality requirement

Encrypting real-time bulk voice traffic inside an already-established VPN tunnel

Encrypting a large multi-gigabyte database backup as quickly as possible on a single trusted server

8 / 10

Which weakness would most directly compromise the security of a symmetric encryption scheme, even if the algorithm itself is mathematically strong?

The sender and receiver being located in different time zones

The secret key being transmitted or stored insecurely, allowing an attacker to obtain it

The encryption being performed on a device with more than one CPU core

The ciphertext being visible to network intermediaries while in transit, which some environments handle differently depending on the specific compliance regime in scope

The algorithm being published and publicly reviewed by cryptographers

The plaintext message being shorter than 100 characters

9 / 10

Which statement accurately describes what a digital signature provides that a plain cryptographic hash alone does not?

A plain hash alone already proves who created the message with full non-repudiation

A digital signature and a plain hash are cryptographically identical operations

A digital signature eliminates the need for any public key infrastructure

A digital signature provides no integrity guarantee at all, unlike a plain hash

A digital signature, created by encrypting a hash with the signer's private key, provides non-repudiation and proof of the signer's identity, not just data integrity

A digital signature requires no hashing step whatsoever

10 / 10

Which factor most directly determines the practical security strength of a symmetric encryption algorithm against brute-force attacks, all else being equal?

The number of employees at the vendor that wrote the encryption software

The font used to display the ciphertext in a text editor

The physical location of the server performing encryption

The color scheme of the software's user interface

The day of the week the encryption operation was performed

The length of the encryption key, in bits

Your score is

The average score is 0%