Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSAP Exam - Topic 1 Question 56 Discussion

Posted by Margart on Aug 24, 2022 at 02:07 PM

In which of the following cryptographic attacking techniques does the attacker pick up the information to be encrypted and take a copy of it with the encrypted data?

Suggested Answer: C

This is used to find patterns in the cryptographic output that might uncover vulnerability or reveal a cryptographic key.

Answer option D is incorrect. In a ciphertext only attack, the attacker obtains encrypted messages that have been encrypted using the same

encryption algorithm. For example, the original version of WEP used RC4, and if sniffed long enough, the repetitions would allow a hacker to

extract the WEP key. Such types of attacks do not require the attacker to have the plaintext because the statistical analysis of the sniffed log

is enough.

Answer option A is incorrect. In a chosen ciphertext attack, the attacker can choose the ciphertext to be decrypted and can then analyze the

plaintext output of the event. The early versions of RSA used in SSL were actually vulnerable to this attack.

Answer option B is incorrect. In a known plaintext attack, the attacker should have both the plaintext and ciphertext of one or more

messages. These two items are used to extract the cryptographic key and recover the encrypted text.


Get Premium ISSAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
15 comments · newest first
SC
Scarlet 11 months ago
Chosen ciphertext is the one where they get both, for sure.
DA
Daisy 11 months ago
Wait, are we sure about that? Seems tricky!
TA
Tasia 12 months ago
Chosen plaintext attack sounds right to me.
PA
Paris 12 months ago
I thought it was a Known plaintext attack.
TA
Tamera 12 months ago
It's definitely a Chosen ciphertext attack!
GI
Gianna 1 year ago
I'm leaning towards the ciphertext only attack, but I can't recall if that one involves picking any plaintext at all.
CA
Cassi 1 year ago
I feel like the chosen plaintext attack might be the right answer since it involves selecting the plaintext to see how it gets encrypted.
GL
Glynda 1 year ago
I remember practicing a question similar to this, and I think the known plaintext attack is when the attacker has both the plaintext and ciphertext, but that doesn't seem to fit here.
FR
Freida 1 year ago
I think the chosen ciphertext attack is about manipulating the ciphertext, but I'm not entirely sure if it involves copying the plaintext too.
JU
Juan 1 year ago
I'm a bit confused on the difference between RETs, FTRs, and DETs. I'll have to review my notes to make sure I understand the concepts.
JO
Josphine 1 year ago
I'm feeling confident on this one. HIPAA is designed to protect all forms of personally identifiable health data, whether it's paper, electronic, or even verbal. I'll select D - All of the above.
VI
Vincenza 1 year ago
Wait, I'm confused. Isn't it the other way around - that closed questions are more open-ended and open questions are more specific? I'll have to review my notes on this topic before answering.
HE
Heike 1 year ago
I have a vague memory of fishbone diagrams being more about root causes rather than net benefits. Is that right?
JO
Joesph 1 year ago
From what I recall, we did a practice question that hinted at the general settings in the tunnel-group. But now I'm not so sure...
EA
Earleen 1 year ago
I remember studying MTU settings, but I'm not entirely sure which option to pick for ACI Multi-Site.
0/2000 characters

Save Cancel