Quiz — Cryptography Basics Final
Final 10-question quiz across hashing, encryption, TLS, and crypto hygiene
Cryptography Basics — final APPLY check
Topic 8 covered hashing versus encryption, MD5 versus SHA-256, salted slow password hashes, a toy-only crack lab on digests you created, AES as a shared secret, RSA key pairs, PKI, digital signatures, the TLS handshake and the padlock’s limits, certificate fields, CAs and CT, public-cert inspection on example.com or a domain you own, homebrew as a stop sign, key lifecycle without git/chat leaks, and an encrypt-and-verify round trip in $HOME/cyberlium-lab. Twelve APPLY questions — the subtitle still says "10-question"; the bar is twelve, covering the whole topic, then an honest tease of Topic 9 Ethical Hacking (Ethical Hacking): authorized methodology next, not a license to attack. No MITM, no fake CAs, no live keys in notes, no homebrew weapons, no cracking stolen dumps. Reward badge: +40 XP — Cryptography Basics Complete! Proceed: Complete Topic. Next lesson title: Ethical Hacking (Ethical Hacking).
APPLY: Hash ≠ encrypt (Module 1): a teammate stores “encrypted passwords” by SHA-256 and also wants to “decrypt” a download hash to recover the ISO. Correct mechanism?
APPLY: MD5 vs SHA-256 (Module 1): you need a new integrity fingerprint for lab.txt. Which algorithm, and what do you refuse?
APPLY: Salt + slow KDF (Module 1): password storage for an app you own. True practice?
APPLY: Toy-only crack lab (Module 1): you hashed a short lab password you chose and recovered it from a five-word list. A friend dumps a breach file into the script. Your call?
APPLY: AES shared key (Module 2): bulk encryption of lab.txt used one secret to lock and unlock. What is AES, and what is the operational hard part?
APPLY: RSA pair (Module 2): public encrypts or verifies; private decrypts or signs. A classmate wants to paste the private PEM into the group chat “so everyone can test.” Correct model?
APPLY: PKI (Modules 2–3): how does a browser believe example.com’s public key, and what do you not install?
APPLY: Signatures (Module 2): a vendor publishes a file and a signature. What did the signature give you, and what did it not?
APPLY: TLS padlock (Module 3): HTTPS login at a café. Select the true pair. (Select 2)
APPLY: Cert fields (Module 3 lab): openssl s_client | x509 on example.com (or a domain you own) filled cert-lab.txt. Which fields, and what is forbidden?
APPLY: Homebrew (Module 4): a teammate wants XOR-crypto, IV=0, verify=False, and a gist titled for the company VPN. Your stop list?
APPLY: Keys/git + Topic 9 tease: a live private key is sitting in a chat draft, and someone says Ethical Hacking means you may attack any host that has TLS. Honest next-lesson read?