MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which of the following is considered a weak encryption algorithm due to its short key size?
   a. AES
   b. DES
   c. Blowfish
   d. Twofish
   Answer: b. DEStestbook+1​
2. What is the main reason RC4 is no longer recommended for use in secure communications?
   a. Slow performance
   b. Large key sizes
   c. Known cryptographic vulnerabilities
   d. Incompatibility with web browsers
   Answer: c. Known cryptographic vulnerabilitiesswiftorial​
3. Which legacy hash algorithm is especially prone to collision attacks?
   a. SHA-256
   b. SHA-512
   c. MD5
   d. SHA-2
   Answer: c. MD5owasp+1​
4. What type of attack is possible due to weak encryption protocols in SSL/TLS, such as SSLv2?
   a. Poisoning
   b. DROWN attack
   c. Replay attack
   d. Spoofing
   Answer: b. DROWN attackcqr​
5. Which of these wireless security protocols is known for having the weakest encryption?
   a. WPA3
   b. WPA2
   c. WPA
   d. WEP
   Answer: d. WEPsanfoundry+1​
6. What is a common result of using outdated encryption algorithms?
   a. Faster communication
   b. Data remains secure
   c. Increased vulnerability to attacks
   d. Improved device compatibility
   Answer: c. Increased vulnerability to attacksconvesio+1​
7. Why is DES considered a broken encryption standard today?
   a. It uses asymmetric cryptography
   b. Its 56-bit key can be brute-forced
   c. It uses large block sizes
   d. It is not implemented in software
   Answer: b. Its 56-bit key can be brute-forcedtestbook+1​
8. Which algorithm should NOT be used for file integrity checks?
   a. SHA-256
   b. SHA-3
   c. MD5
   d. SHA-512
   Answer: c. MD5swiftorial​
9. What is the main security problem associated with SHA-1?
   a. Padding oracle vulnerability
   b. Collision resistance failure
   c. Length extension attacks
   d. Timing attack
   Answer: b. Collision resistance failureswiftorial​
10. Which is a stream cipher known to have significant vulnerabilities?
    a. RC4
    b. AES
    c. DES
    d. Twofish
    Answer: a. RC4swiftorial​
11. What is the term for a flaw or inadequacy in an encryption protocol?
    a. Threat
    b. Vulnerability
    c. Exploit
    d. Risk
    Answer: b. Vulnerabilityincludehelp+2​
12. Which attack targets outdated CBC mode in SSL/TLS to decrypt sensitive data?
    a. POODLE
    b. Man-in-the-middle
    c. Rainbow table
    d. Replay
    Answer: a. POODLEcqr​
13. What risk does weak encryption pose to organizations?
    a. Non-compliance with regulations
    b. Improved uptime
    c. Better user experience
    d. Lower cost
    Answer: a. Non-compliance with regulationsglobalsign+1​
14. Which encrypted wireless protocol is often easily cracked due to weak initialization vectors?
    a. WPA3
    b. WPA2
    c. WEP
    d. WPA
    Answer: c. WEPinterviewbit+1​
15. Why is using export-grade ciphers in TLS considered insecure?
    a. Difficult to implement
    b. Easier to brute-force
    c. Not widely supported
    d. Complicates key management
    Answer: b. Easier to brute-forcecqr​
16. What happens if an organization allows outdated SSL/TLS protocols?
    a. Users gain enhanced privacy
    b. Connections may be downgraded to weak encryption
    c. Data is completely unreadable
    d. Sessions remain stable
    Answer: b. Connections may be downgraded to weak encryptionglobalsign​
17. Which hash algorithm is deprecated due to vulnerabilities in digital signatures?
    a. SHA-256
    b. MD5
    c. SHA-1
    d. SHA-3
    Answer: c. SHA-1owasp+1​
18. What is the main vulnerability of Triple DES (3DES)?
    a. Provides no encryption
    b. Susceptible to Sweet32 attack
    c. Key size too long
    d. Uses asymmetric encryption
    Answer: b. Susceptible to Sweet32 attackcqr​
19. Which cryptographic failure can result from improper key management and weak algorithms?
    a. Brute force resistance
    b. Cryptographic failure
    c. Data loss protection
    d. Key rotation
    Answer: b. Cryptographic failureinvicti+1​
20. Which is NOT a weak cipher for web applications?
    a. RC4
    b. DES
    c. AES
    d. MD5
    Answer: c. AESswiftorial​
21. What commonly leads to weak encryption in older web servers?
    a. Large key sizes
    b. Support for legacy cipher suites
    c. Use of ECC
    d. Updated firmware
    Answer: b. Support for legacy cipher suitespentestpeople+1​
22. Which cipher suite characteristic signals weakness?
    a. Strong key exchange
    b. Use of MD5 for MAC
    c. AES-256 encryption
    d. Perfect forward secrecy
    Answer: b. Use of MD5 for MACconvesio​
23. Which tool is often used to scan for weak TLS cipher suites?
    a. Ping
    b. Wireshark
    c. Qualys SSL Labs
    d. Netstat
    Answer: c. Qualys SSL Labsconvesio​
24. What type of attack involves finding two different messages with the same hash?
    a. Replay attack
    b. Man-in-the-middle
    c. Collision attack
    d. Phishing
    Answer: c. Collision attackglobalsign​
25. What is the effect of using DES with modern computational resources?
    a. Infeasible to attack
    b. Easily crackable
    c. Guaranteed security
    d. Not used for encryption
    Answer: b. Easily crackabletestbook+1​
26. What does “key size” affect most in symmetric encryption algorithms?
    a. Hash speed
    b. Vulnerability to brute force
    c. Padding requirements
    d. Data format
    Answer: b. Vulnerability to brute forcetestbook+1​
27. What can happen if weak hash functions are used in storing passwords?
    a. Fast computation
    b. Passwords easily cracked
    c. Enhanced privacy
    d. Multi-factor enabled
    Answer: b. Passwords easily crackedglobalsign+1​
28. Why should export-grade RSA keys be avoided?
    a. Too complex
    b. Performance issues
    c. Weak key length
    d. Open source only
    Answer: c. Weak key lengthconvesio+1​
29. Which is NOT a reason why an algorithm may be considered weak?
    a. Short keys
    b. Known cryptanalysis attacks
    c. Outdated design
    d. Open source licensing
    Answer: d. Open source licensingswiftorial​
30. Which symmetric encryption algorithm is now considered secure and recommended?
    a. DES
    b. RC4
    c. AES
    d. MD5
    Answer: c. AEStestbook+1​
31. Which attack specifically exploits weak block ciphers with short block lengths?
    a. FREAK
    b. Sweet32
    c. Logjam
    d. BEAST
    Answer: b. Sweet32cqr​
32. SHA-1 is weak for digital signatures due to which reason?
    a. Hash output length too short
    b. Susceptible to collision attacks
    c. Too fast for hardware
    d. Requires secret key
    Answer: b. Susceptible to collision attacksswiftorial​
33. Cipher suites using which MAC algorithm should be avoided for modern applications?
    a. SHA-2
    b. HMAC-SHA256
    c. MD5
    d. SHA-3
    Answer: c. MD5convesio+1​
34. What makes RC4’s key schedule especially problematic?
    a. Predictable output
    b. Requires two keys
    c. Key length is too large
    d. Hardware-only implementation
    Answer: a. Predictable outputswiftorial​
35. What regulatory impact does using weak encryption have?
    a. Encourages migration
    b. Risk of fines and penalties
    c. Creates new standards
    d. No impact
    Answer: b. Risk of fines and penaltiess4e+1​
36. Which legacy cipher suite is most commonly recommended for removal from TLS configs?
    a. AES256-GCM-SHA384
    b. DES-CBC-SHA
    c. ECDHE-ECDSA-AES128
    d. ChaCha20-Poly1305
    Answer: b. DES-CBC-SHAconvesio+1​
37. What type of cryptographic failure does improper padding validation expose?
    a. Heartbleed
    b. Padding oracle attacks
    c. Rainbow table attacks
    d. Chosen-ciphertext attacks
    Answer: b. Padding oracle attacksglobalsign​
38. Why is Base64 encoding NOT considered encryption?
    a. Too complex
    b. Easily decoded
    c. Cryptographic strength
    d. Key management issues
    Answer: b. Easily decodedinvicti​
39. In which security standard are weak encryptions specifically discouraged?
    a. PCI DSS
    b. FTP
    c. SMTP
    d. POP3
    Answer: a. PCI DSSs4e+1​
40. Which hashing algorithm should be avoided for certificates after 2017?
    a. SHA-256
    b. SHA-512
    c. SHA-1
    d. SHA-3
    Answer: c. SHA-1owasp+1​
41. Which term describes an encryption method that’s been broken and is no longer recommended?
    a. Export-grade cipher
    b. Strong cipher
    c. Broken algorithm
    d. Next-gen cipher
    Answer: c. Broken algorithmcwe.mitre​
42. An algorithm with which of the following properties is NOT considered weak?
    a. Vulnerable to attacks
    b. Short key length
    c. Endorsed by current standards
    d. Known to be deprecated
    Answer: c. Endorsed by current standardsswiftorial​
43. The FREAK attack exploits which aspect of weak encryption?
    a. Key rotation
    b. Export-grade ciphers
    c. Secure key exchange
    d. Hardware tokens
    Answer: b. Export-grade cipherscqr​
44. What’s a side effect of a successful attack on a weak cipher suite?
    a. Unauthorized data access
    b. Faster communication
    c. Automatic software updates
    d. Lower energy use
    Answer: a. Unauthorized data accessglobalsign+1​
45. Why is it dangerous to use encryption algorithms with published vulnerabilities?
    a. Open source
    b. Can be reverse engineered easily
    c. Attackers can exploit known weaknesses
    d. Free to use
    Answer: c. Attackers can exploit known weaknessespentestpeople+1​
46. What is the result of a downgrade attack?
    a. Service denial
    b. Use of older, weaker encryption
    c. OS crash
    d. Firmware corruption
    Answer: b. Use of older, weaker encryptioncqr+1​
47. What’s the biggest issue with the hash function MD5?
    a. It produces random outputs
    b. It is collision-prone
    c. It’s not available in software
    d. It uses asymmetric encryption
    Answer: b. It is collision-proneowasp+1​
48. What does the Logjam attack target?
    a. Weak RSA authentication
    b. Diffie-Hellman key exchange with small primes
    c. SHA-3 hashes
    d. RC4 stream cipher
    Answer: b. Diffie-Hellman key exchange with small primescqr​
49. What is a realistic consequence of using deprecated cryptographic algorithms?
    a. Guarantee of security
    b. System optimization
    c. Data breaches and theft
    d. Enhanced compliance
    Answer: c. Data breaches and thefts4e+1​
50. When securing web applications, which step is recommended regarding weak ciphers?
    a. Increase use of RC4
    b. Remove and disable them
    c. Switch to MD5 hashing
    d. Use only 56-bit keys
    Answer: b. Remove and disable theminvicti+2​

1. https://testbook.com/objective-questions/mcq-on-cryptography–5eea6a0939140f30f369d918
2. https://www.swiftorial.com/tutorials/security/vulnerabilities/cryptographic_vulnerabilities/weak_encryption_algorithms
3. https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/04-Testing_for_Weak_Encryption
4. https://cqr.company/web-vulnerabilities/weak-encryption-algorithms/
5. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
6. https://www.interviewbit.com/cyber-security-mcq/
7. https://convesio.com/knowledgebase/article/the-dangers-of-weak-cipher-suites-what-you-need-to-know/
8. https://www.globalsign.com/en/blog/security-risks-outdated-encryption
9. https://www.includehelp.com/mcq/cyber-security-mcqs.aspx
10. https://s4e.io/scan/parent/missing-weak-encryption
11. https://www.invicti.com/blog/web-security/cryptographic-failures
12. https://www.pentestpeople.com/blog-posts/owasp-top-ten-cryptographic-failures
13. https://cwe.mitre.org/data/definitions/327.html
14. https://www.igmguru.com/blog/cyber-security-mcqs
15. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
16. https://www.placementpreparation.io/mcq/cyber-security/
17. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
18. https://blog.codacy.com/cryptographic-failures-owasp-top-10
19. https://cybersecurityventures.com/wp-content/uploads/2020/03/Cybersecurity-Quiz.pdf
20. https://www.arcserve.com/blog/5-common-encryption-algorithms-and-unbreakables-future