참고: ExamPassdump에서 Google Drive로 공유하는 무료 2026 WGU Introduction-to-Cryptography 시험 문제집이 있습니다: https://drive.google.com/open?id=1VheYTM5HIXydDKgjdz7x17lrQ15--gYy
ExamPassdump에서 출시한 WGU 인증 Introduction-to-Cryptography시험덤프는ExamPassdump의 엘리트한 IT전문가들이 IT인증실제시험문제를 연구하여 제작한 최신버전 덤프입니다. 덤프는 실제시험의 모든 범위를 커버하고 있어 시험통과율이 거의 100%에 달합니다. 제일 빠른 시간내에 덤프에 있는 문제만 잘 이해하고 기억하신다면 시험패스는 문제없습니다.
| Section | Objectives |
|---|---|
| Asymmetric Encryption | - Public key cryptography principles - RSA and ECC fundamentals |
| Cryptographic Protocols and Applications | - Secure communication design principles - TLS/SSL conceptual overview |
| Foundations of Cryptography | - Historical and modern cryptography principles - Core concepts of confidentiality, integrity, authentication, non-repudiation |
| Hash Functions and Message Authentication | - MAC and HMAC mechanisms - Cryptographic hash functions (e.g., SHA family concepts) |
| Key Management and PKI | - Certificates, certificate authorities, and PKI structure - Key exchange and lifecycle management |
| Symmetric Encryption | - Block and stream ciphers - AES and legacy algorithms (e.g., DES conceptually) |
>> Introduction-to-Cryptography시험패스 덤프공부자료 <<
ExamPassdump 에서는 WGU Introduction-to-Cryptography 시험에 대비한 고품질 WGU Introduction-to-Cryptography덤프를 제공해 드립니다. WGU Introduction-to-Cryptography덤프는 IT 업계 종사자들에 있어서 아주 중요한 인증시험이자 인기 자격증을 취득할수 있는 필수과목입니다. WGU Introduction-to-Cryptography시험을 합격하여 자격증을 취득하시면 취업하는데 가산점이 될수 있고 급여 인상이나 이직에도 많을 도움을 드릴수 있습니다.
질문 # 87
(Which certificate encoding process is binary-based?)
정답：A
설명：
DER (Distinguished Encoding Rules) is a binary encoding format used to represent ASN.1 structures in a canonical, unambiguous way. X.509 certificates are defined using ASN.1, and DER provides a strict subset of BER (Basic Encoding Rules) that guarantees a single, unique encoding for any given data structure. That "unique encoding" property is important for cryptographic operations such as hashing and digital signatures, because different encodings of the same abstract data could otherwise produce different hashes and break signature verification. In contrast, PEM is not a binary encoding; it is essentially a Base64-encoded text wrapper around DER data, bounded by header/footer lines (e.g.,
"BEGIN CERTIFICATE"). PKI is an overall framework for certificate issuance, trust, and lifecycle management-not an encoding. RSA is an asymmetric algorithm used for encryption/signing, not a certificate encoding format. Therefore, the binary-based certificate encoding process among the options is DER.
질문 # 88
(What describes a true random number generator?)
정답：A
설명：
A true random number generator (TRNG) draws randomness from physical phenomena that are inherently unpredictable and not algorithmically reproducible. Because of this, it is nondeterministic: you cannot feed it the same "input" and expect the same output stream. TRNGs are often slower than PRNGs because they depend on collecting entropy from hardware sources and may require conditioning to remove bias. This aligns with option B: slow and nondeterministic, producing different results even under similar or repeated conditions. Option A describes a deterministic PRNG, where identical seeds yield identical sequences. Option C is unrelated; factorization is a hard math problem used in cryptography (e.g., RSA security assumptions), not a randomness generator definition. Option D describes a counter, which is deterministic and not random.
In secure systems, TRNG output may seed a cryptographically secure PRNG to provide both unpredictability and high throughput; but the defining characteristic of a TRNG is nondeterminism from physical entropy.
Therefore, option B is correct.
질문 # 89
(Which mechanism can be applied to protect the integrity of plaintext when using AES?)
정답：C
설명：
AES by itself is a symmetric block cipher that provides confidentiality, but not guaranteed integrity unless used in an authenticated mode. To protect integrity of the plaintext (ensuring it has not been altered), a Message Authentication Code (MAC) can be applied. In the classic Encrypt-then-MAC pattern, the sender encrypts the plaintext with AES and then computes a MAC (often HMAC-SHA-256 or CMAC-AES) over the ciphertext (and relevant headers). The receiver verifies the MAC before attempting decryption, preventing tampering and many padding-oracle style vulnerabilities.
Alternatively, AES can be used in an AEAD mode like AES-GCM, which produces an authentication tag serving a similar purpose, but among the listed options the general integrity mechanism is "MAC." RC4 is an unrelated stream cipher and does not provide integrity. RSA is asymmetric and not the standard integrity add-on for AES-encrypted bulk data. Kerberos is an authentication protocol and key distribution system, not a message integrity primitive. Therefore, to protect plaintext integrity when using AES, the correct mechanism is a Message Authentication Code.
질문 # 90
(An administrator has configured a Virtual Private Network (VPN) connection utilizing IPsec transport mode with Encapsulating Security Payload (ESP) between a server in the corporate office and a client computer in the remote office. In which situation can the packet content be inspected?)
정답：B
설명：
With IPsec ESP in transport mode, the payload of the original IP packet (typically the transport-layer segment and higher) is encrypted and integrity-protected between the two endpoints-here, the corporate server and the remote client. Because encryption is applied by the sending endpoint and removed only by the receiving endpoint, intermediate routers, switches, and monitoring devices in either network cannot view the protected payload while it is in transit. They may see outer IP headers and certain metadata needed for routing, but not the encrypted content protected by ESP. As a result, the packet's contents are inspectable only at the endpoints: before encryption on the sender (plaintext exists in memory/stack before IPsec processing) and after decryption on the receiver (plaintext is restored for the application). This is true whether the traffic traverses internal networks or the Internet; the cryptographic boundary is between the endpoints participating in the IPsec SA. Therefore, inspection of the actual content is possible only on the devices at headquarters and offsite, before sending and after receiving, not by in-transit networks.
질문 # 91
(Which default port must be allowed by firewalls for the key exchange of the IPsec handshaking process to be successful?)
정답：B
설명：
IPsec's initial key exchange is commonly performed using IKE (Internet Key Exchange), which negotiates Security Associations (SAs), authenticates peers, and establishes shared keys for ESP/AH protection. The traditional and default transport for IKEv1 and IKEv2 is UDP port 500. During negotiation, peers exchange proposals (crypto suites), perform Diffie-Hellman to derive key material, and authenticate using pre-shared keys, certificates, or EAP methods. If a firewall blocks UDP 500, the IKE negotiation cannot begin, preventing IPsec tunnels from forming. In many real deployments, NAT traversal is also used; in that case, traffic typically shifts to UDP 4500 (NAT-T) after detection of NAT, but UDP 500 is still required for the initial exchange and NAT detection in many configurations. TCP 500 is not standard for IKE. Port 443 is associated with HTTPS/TLS and some SSL VPNs, not IPsec IKE. Therefore, among the options provided, the firewall must allow UDP 500 for IPsec key exchange to succeed.
질문 # 92
......
ExamPassdump의 높은 적중율을 보장하는 최고품질의WGU Introduction-to-Cryptography덤프는 최근WGU Introduction-to-Cryptography실제인증시험에 대비하여 제작된것으로 엘리트한 전문가들이 실제시험문제를 분석하여 답을 작성한 만큼 시험문제 적중율이 아주 높습니다. ExamPassdump의 WGU Introduction-to-Cryptography 덤프는WGU Introduction-to-Cryptography시험을 패스하는데 가장 좋은 선택이기도 하고WGU Introduction-to-Cryptography인증시험을 패스하기 위한 가장 힘이 되어드리는 자료입니다.
Introduction-to-Cryptography최신버전 인기 시험자료: https://www.exampassdump.com/Introduction-to-Cryptography_valid-braindumps.html
그 외, ExamPassdump Introduction-to-Cryptography 시험 문제집 일부가 지금은 무료입니다: https://drive.google.com/open?id=1VheYTM5HIXydDKgjdz7x17lrQ15--gYy