MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which of the following best defines a “weak key” in cryptography?
   a. A key that is too long to be practical
   b. A key that causes a cipher to behave insecurely or predictably
   c. A key that is easy to remember
   d. A key generated by a secure algorithm
   Answer: bwikipedia+1​
2. Which block cipher famously suffers from the existence of “weak” and “semi-weak” keys?
   a. AES
   b. DES
   c. RC5
   d. Serpent
   Answer: bscribd+1​
3. One cause of weak keys in encryption schemes is:
   a. Very high entropy in key generation
   b. Predictable key generation process
   c. Using strong initialization vectors
   d. Random key selection
   Answer: bquantumxc+1​
4. In DES, how many known weak keys exist?
   a. 2
   b. 4
   c. 8
   d. 16
   Answer: bwikipedia​
5. What is a “semi-weak” key?
   a. A key that encrypts but not decrypts
   b. Two keys that encrypt plaintext to identical ciphertexts
   c. A key that is too strong for the algorithm
   d. A key with even parity bits only
   Answer: bwikipedia​
6. Which hexadecimal DES key is considered weak?
   a. 0xA3A3A3A3A3A3A3A3
   b. 0x0101010101010101
   c. 0xFFFFFFFF00000000
   d. 0x0123456789ABCDEF
   Answer: bwikipedia​
7. What is a potential risk when using weak keys in symmetric cryptography?
   a. Reduced bandwidth
   b. Increased power consumption
   c. Ciphertext may be easily reversible
   d. Unstable storage
   Answer: caqtiveguard+1​
8. The term “weak key” can also refer to keys in which asymmetric algorithm?
   a. DSA
   b. ECDSA
   c. RSA
   d. All of the above
   Answer: dcse.umich+1​
9. The probability of randomly generating a weak DES key is:
   a. High
   b. Low
   c. Impossible
   d. Equal to any other key
   Answer: bwikipedia​
10. Which method helps avoid usage of weak keys?
    a. Manual key entry
    b. Using a vetted key generation algorithm
    c. Shortening key length
    d. Default OS settings
    Answer: baqtiveguard+1​
11. The key 0xFEFEFEFEFEFEFEFE in DES is classified as:
    a. Strong key
    b. Public key
    c. Weak key
    d. Rotating key
    Answer: cwikipedia​
12. A weak key in RC4 is often associated with:
    a. Short key length
    b. Key reuse
    c. Weak initialization vectors
    d. Strong session keys
    Answer: ccqr+1​
13. Which hash algorithm is now considered weak due to vulnerabilities?
    a. SHA-256
    b. SHA-512
    c. MD5
    d. SHA-3
    Answer: cglobalsign​
14. In IDEA, weak keys are known for:
    a. Allowing chosen-plaintext attacks
    b. Maximizing throughput
    c. Reducing power needs
    d. Supporting longer keys only
    Answer: awikipedia​
15. Blowfish weak keys typically cause:
    a. Key-dependent S-boxes to become insecure
    b. All ciphertexts to be the same
    c. Hash functions to break
    d. RSA modulus to factor
    Answer: awikipedia​
16. What can result if a pseudo-random number generator (PRNG) used for key generation is not truly random?
    a. More secure keys
    b. High-entropy keys
    c. Predictable (weak) keys
    d. Stronger cipher modes
    Answer: cquantumxc+1​
17. Which of these is a typical goal in cryptographic algorithm design?
    a. To allow some weak keys for testing purposes
    b. To have no weak keys and a flat keyspace
    c. To create as many keys as possible
    d. To allow key reuse
    Answer: bwikipedia​
18. In block ciphers, why are weak keys sometimes overlooked?
    a. Because they are very rare
    b. Because they increase security
    c. Because they boost performance
    d. Because they are widely published
    Answer: awikipedia​
19. Which of the following is NOT a characteristic of weak keys?
    a. Producing identical subkeys or patterns
    b. Making encryption easily reversible
    c. Maximizing entropy
    d. Reducing the security of the cryptosystem
    Answer: cwikipedia​
20. What countermeasure should be included in key generation routines to guard against weak keys?
    a. Random re-sampling if a weak key is generated
    b. Ignoring key patterns
    c. Using keys of all zeros
    d. Repeating the key schedule
    Answer: aaqtiveguard+1​
21. Weak keys in SSL/TLS can result in:
    a. Stronger encryption
    b. Vulnerability to known-plaintext attacks
    c. Compatibility with all browsers
    d. Faster handshake process
    Answer: bexamradar​
22. Why is it difficult for attackers to exploit weak keys in modern algorithms like AES?
    a. Too many weak keys
    b. No published weaknesses
    c. Insufficiently known weak key patterns
    d. AES is designed without known weak keys
    Answer: dwikipedia​
23. Key size attacks often target:
    a. Weak keys in symmetric ciphers
    b. Weak keys in hash functions
    c. Keys with low entropy
    d. All of the above
    Answer: dcqr+2​
24. When might a brute-force attack exploit weak keys?
    a. When all keys are equally secure
    b. When weak keys cause predictable outputs
    c. When using key stretching
    d. When hash collisions are impossible
    Answer: bcqr​
25. Which property of good key generation is compromised by weak keys?
    a. Confidentiality only
    b. Availability only
    c. Randomness and unpredictability
    d. Low computational cost
    Answer: cquantumxc+1​
26. “All zeros key” in DES is sometimes categorized as:
    a. Sub-weak
    b. Weak (if parity bits are ignored)
    c. Not weak
    d. Strong
    Answer: bwikipedia​
27. The impact of weak keys on cipher strength is usually:
    a. Catastrophic for all keys
    b. Negligible in a large keyspace if rare
    c. Always severe
    d. Equivalent to plaintext transmission
    Answer: bwikipedia​
28. Which cryptosystem had a historical problem with weak keys in early implementations?
    a. T52 rotor machine
    b. X.509 PKI only
    c. IPv6
    d. WPA3
    Answer: awikipedia​
29. Weak key detection should be especially enforced in:
    a. Systems with manual key entry
    b. Automated software systems
    c. Environments where attackers may influence key choice
    d. All production environments
    Answer: caqtiveguard+1​
30. Repeating a weak key for multiple encryptions leads to:
    a. Higher randomness
    b. Key exhaustion
    c. Key reuse vulnerabilities
    d. Improved performance
    Answer: ccqr+1​
31. A typical feature of weak DES keys is:
    a. All subkeys generated by the key schedule are identical
    b. Subkeys vary as usual
    c. They generate unique S-boxes for every round
    d. Hash collisions only
    Answer: awikipedia​
32. Weak public keys in RSA often result from:
    a. Insecure prime generation
    b. Strong key schedule
    c. Using large modulus only
    d. Double encryption
    Answer: acse.umich+1​
33. What is an effective way to manage the risk of weak keys in software?
    a. Checking for known weak keys during key generation
    b. Ignoring the risk
    c. Using user birthdays as keys
    d. Re-using keys across applications
    Answer: aaqtiveguard+1​
34. How many DES semi-weak keys exist?
    a. 2
    b. 6
    c. 12
    d. 24
    Answer: cwikipedia​
35. The attack that specifically targets repetitive key use is called:
    a. Man-in-the-middle attack
    b. Replay attack
    c. Key reinstallation attack
    d. Known-plaintext attack
    Answer: dcqr+1​
36. When a key results in identical encryption and decryption processes, it is usually:
    a. A prime key
    b. A weak key
    c. A round key
    d. An active key
    Answer: bwikipedia​
37. What is the role of key entropy in preventing weak keys?
    a. Higher entropy reduces the chance of generating weak keys
    b. Lower entropy ensures strong keys
    c. Entropy only matters for initialization vectors
    d. Entropy is not related
    Answer: aquantumxc+1​
38. Which block cipher did NOT have known weak keys?
    a. DES
    b. Blowfish
    c. IDEA
    d. AES
    Answer: dwikipedia​
39. In AES-GCM, weak keys are identified using:
    a. Group order of the authentication key H
    b. Repeated key schedules
    c. Public modulus factoring
    d. Randomness tests only
    Answer: awikipedia​
40. The best way to ensure a random cryptographic key does not end up weak is:
    a. Use open-source algorithms only
    b. Generate keys with hardware-based RNGs and check for known weak values
    c. Shorten key length
    d. Use key hashing
    Answer: baqtiveguard+1​
41. A predictable PRNG endangers:
    a. Only nonces
    b. Only IVs
    c. All generated cryptographic values, including keys
    d. Only signatures
    Answer: cquantumxc+1​
42. Weak cryptosystems often fail to provide:
    a. Confidentiality and integrity
    b. High throughput
    c. User authentication
    d. Interoperability
    Answer: acodacy+1​
43. Which scenario raises the likelihood of using a weak key?
    a. Using a cryptographically secure PRNG
    b. Manually chosen password as a key
    c. Long key length
    d. Regular key rotation
    Answer: baqtiveguard​
44. A cipher that must be trusted should have:
    a. Many weak keys for testing
    b. Few or no weak keys, and all should be documented
    c. Double rounds exclusively
    d. Weak initialization vectors
    Answer: bwikipedia​
45. Which of the following is true about modern recommendations regarding DES?
    a. Still recommended for all applications
    b. Acceptable if used with key stretching
    c. Should not be used, as all keys can be brute-forced
    d. Only used in home encryption
    Answer: ccqr+1​
46. Semi-weak key pairs in DES share which property?
    a. They invert each other’s encryption
    b. They maximize entropy
    c. They increase initialization vector strength
    d. They only occur in asymmetric ciphers
    Answer: awikipedia​
47. The probability of accidentally generating a weak key in a large, well-designed keyspace is usually:
    a. High
    b. Medium
    c. Extremely low
    d. Impossible
    Answer: caqtiveguard+1​
48. Which risk is heightened when encryption keys can be predicted?
    a. Enhanced availability
    b. Encryption failure
    c. Key compromise and system breach
    d. Overhead reduction
    Answer: caqtiveguard+1​
49. “All F” DES key (0xFFFFFFFFFFFFFFFF) is weak if:
    a. Parity bits are ignored
    b. Key is too long
    c. Used with RSA only
    d. Used with DES only
    Answer: awikipedia​
50. Cryptographic algorithms like RSA and DSA have suffered large-scale weak key issues due to:
    a. Poor entropy during key generation
    b. Incorrect key size
    c. Algorithmic side-channels exclusively
    d. Padding scheme only
    Answer: acse.umich+1​

1. https://en.wikipedia.org/wiki/Weak_key
2. https://docs.aqtiveguard.com/kb-articles/weak-cryptography-keys/
3. https://www.scribd.com/document/924909879/Network-Security-MCQS
4. https://quantumxc.com/blog/single-points-of-failure-in-cryptography-weak-or-low-entropy/
5. http://cse.umich.edu/awards/pdfs/weakkeys12.conference.pdf
6. https://cqr.company/web-vulnerabilities/weak-encryption-algorithms/
7. https://www.globalsign.com/en/blog/security-risks-outdated-encryption
8. https://examradar.com/cyber-security-mcq-set-12/
9. https://blog.codacy.com/cryptographic-failures-owasp-top-10
10. https://www.sanfoundry.com/cyber-security-problems/
11. https://www.igmguru.com/blog/cyber-security-mcqs
12. https://www.placementpreparation.io/mcq/cyber-security/
13. https://testbook.com/objective-questions/mcq-on-cryptography–5eea6a0939140f30f369d918
14. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
15. https://owasp.org/Top10/A02_2021-Cryptographic_Failures/
16. https://www.reddit.com/r/rust/comments/t33ddj/the_biggest_source_of_vulnerabilities_in/
17. https://www.interviewbit.com/cyber-security-mcq/
18. https://www.quintessencelabs.com/blog/solving-the-problem-of-weak-encryption-keys
19. https://www.studocu.com/en-gb/document/coventry-university/cyber-security/mcq-week1-week2-week3-week4-week5-key-concepts-in-information-security-and/130655435
20. https://cwe.mitre.org/data/definitions/327.html