📝 Confidentiality in network security (8 MCQs)
📖 From Data Communication and Networks • 31. Cryptography and Network Security • 8 questions available
What is Confidentiality in network security?
Confidentiality in network security means ensuring that sensitive information is accessible only to authorized individuals or systems by using encryption and access controls to prevent unauthorized disclosure during storage or transmission.
📝 All Confidentiality in network security MCQs
Q1. Which of the following attacks directly threatens confidentiality by allowing an adversary to observe the content of communications without altering them?
📖 Explanation: Snooping involves passive listening, letting an attacker read data without changing it. This exposure directly compromises confidentiality because the content becomes known to unauthorized parties. The other options either modify data, replay captured messages, or disrupt service, affecting integrity or availability rather than the secrecy of the information.
Q2. If a network suffers from traffic analysis, what can an attacker infer about the confidentiality of the data being transmitted?
📖 Explanation: Traffic analysis reveals metadata such as timing, volume, and communication patterns, enabling an attacker to infer who is communicating and when. While it does not disclose the actual plaintext, the knowledge of patterns can compromise confidentiality by exposing sensitive relationships. The other choices describe encryption status, exact content, or alteration, which are not primary effects of traffic analysis.
Q3. Compare traditional substitution ciphers with modern block ciphers in terms of their ability to provide confidentiality against brute‑force attacks.
📖 Explanation: Modern block ciphers like AES use key sizes of 128 bits or more, creating an astronomically large key space that resists exhaustive search. Traditional substitution ciphers typically employ keys derived from a limited alphabet, making them vulnerable to brute‑force attacks. Consequently, block ciphers provide far stronger confidentiality against such attacks compared to substitution ciphers.
Q4. Which statement best differentiates steganography from cryptography regarding confidentiality?
📖 Explanation: Steganography’s primary goal is to hide the existence of a message, making it invisible to observers, whereas cryptography transforms readable data into unreadable ciphertext but does not conceal that communication is occurring. Thus, the key differentiator is that steganography conceals the presence of hidden data, while cryptography secures the content.
Q5. Evaluate the impact of replay attacks on confidentiality when combined with a lack of proper nonce usage in a symmetric‑key protocol. Which outcome is most likely?
📖 Explanation: When a protocol omits fresh nonces, an attacker can capture a ciphertext and later replay it. Although the data stays encrypted, the reuse of identical ciphertext allows the attacker to observe repeated patterns and potentially correlate them with known events, weakening confidentiality. The attack does not directly alter data (integrity) nor exhaust resources (availability), making confidentiality the most probable victim.
Q6. Apply the principle of defense in depth: how does integrating both cryptography and steganography enhance confidentiality in a multi‑layered security architecture?
📖 Explanation: Combining cryptography with steganography offers two complementary layers: encryption secures the content, and steganography masks the fact that encrypted data is being transmitted. This dual approach makes it harder for adversaries to detect and target the communication, thereby strengthening overall confidentiality within a defense‑in‑depth strategy.
Q7. Synthesize a scenario where an organization uses a modern stream cipher for real‑time video transmission, but an attacker performs traffic analysis. How can the organization mitigate the confidentiality breach while maintaining low latency?
📖 Explanation: To preserve low latency while protecting confidentiality against traffic analysis, the organization can encrypt each video packet and additionally obfuscate packet headers (e.g., randomizing sizes and timing). This packet‑level encryption with header camouflage maintains real‑time performance and reduces the information an analyst can glean from observable traffic patterns.
Q8. Which of the following best explains why denial‑of‑service attacks target availability rather than confidentiality?
📖 Explanation: Denial‑of‑service attacks aim to overwhelm system resources, preventing legitimate users from accessing services, which directly impacts availability. They do not seek to read or alter data, so confidentiality remains unaffected. Consequently, the primary purpose of a DoS attack is to disrupt access rather than expose information.