Security: Practice Questions

To ensure non-repudiation and data integrity, a sender creates a digital signature for a document. Which of the following steps correctly describes how this signature is produced?

In asymmetric cryptography, a sender wants to send a confidential message to a receiver and also provide non-repudiation. Which combination of keys must be used to ensure the message is encrypted for confidentiality and then signed for authenticity?

In the context of computer security, which method involves the malicious redirection of a user to a fraudulent website, even when the user has typed the correct URL into their web browser, typically by corrupting DNS server data or local host files?

To verify the authenticity of a digital certificate during the setup of an encrypted SSL/TLS session, the client software must validate the digital signature attached to the certificate. Whose key is used to decrypt and verify this specific digital signature?

In asymmetric key cryptography, which key is used to encrypt a message that only the intended recipient can read, and which key does the recipient use to decrypt it?

Explain why the TLS (Transport Layer Security) protocol is designed to use asymmetric encryption for the initial handshake but symmetric encryption for the subsequent data transmission phase.