NIST PQC Standards Overview

Final Quiz

Connecting to LMS... Progress: in progress

Assessment

1. Why do NIST PQC standards matter to security practitioners? A. They provide a common reference point for post-quantum migration planning, vendor alignment, and implementation decisions B. They eliminate the need for cryptographic inventory C. They prove quantum computers already broke every system D. They replace all security architecture work

2. What does FIPS 203 standardize? A. A password storage format B. The Module-Lattice-Based Key-Encapsulation Mechanism Standard, known as ML-KEM C. A firewall logging format D. A web browser header

3. What is ML-KEM used for at a practical level? A. User interface design B. File compression C. Key establishment using a key encapsulation mechanism D. Password reset workflows

4. What does FIPS 204 standardize? A. A database replication method B. A backup scheduling rule C. A TLS certificate expiration policy only D. The Module-Lattice-Based Digital Signature Standard, known as ML-DSA

5. What are digital signatures used for? A. Authentication, integrity, and non-repudiation at a practical level B. Compressing network traffic C. Generating random user names D. Replacing all encryption

6. What does FIPS 205 standardize? A. A key-value database B. The Stateless Hash-Based Digital Signature Standard, known as SLH-DSA C. A password hashing policy D. A cloud billing standard

7. Why does SLH-DSA matter? A. It replaces all key establishment B. It is only used for passwords C. It provides a hash-based digital signature option with different design tradeoffs from ML-DSA D. It removes the need for signatures

8. Why is algorithm diversity important? A. Diversity makes migration unnecessary B. Diversity guarantees every implementation is secure C. Diversity eliminates performance tradeoffs D. Different mathematical foundations can reduce reliance on a single design family

9. What is the practical difference between selected and standardized? A. A selected algorithm may still be moving toward a published standard, while a standardized algorithm has a formal published standard B. They always mean exactly the same thing C. Selected algorithms should never be tracked D. Standardized algorithms are only theoretical

10. Why should organizations consider key and signature sizes? A. Size has no operational effect B. Larger cryptographic objects can affect bandwidth, storage, certificates, protocols, constrained devices, and interoperability C. Larger values are always better in every situation D. Size replaces security review

11. What is a security category at a high level? A. A project management label only B. A software license type C. A way to describe intended security strength levels for algorithm parameter sets D. A network port number

12. Why is cryptographic inventory important for PQC migration? A. Inventory replaces testing B. Inventory guarantees automatic migration C. Inventory only matters after a breach D. Organizations need to know where cryptography is used before they can prioritize and migrate it

13. What is cryptographic agility? A. The ability to change algorithms, parameters, libraries, keys, and protocols without redesigning the whole system B. A guarantee that no standards will change C. A method for hiding cryptographic use D. A replacement for vendor management

14. Why are hybrid transition approaches considered? A. They eliminate all testing B. They can combine classical and post-quantum mechanisms during migration to manage compatibility and transition risk C. They make every system quantum-safe automatically D. They avoid the need for standards

15. Which statement best summarizes the NIST PQC standards overview? A. The standards mean every system is already migrated B. The standards only matter to mathematicians C. The standards give organizations a foundation for moving key establishment and signatures toward post-quantum algorithms through careful inventory, testing, agility, and migration planning D. The standards eliminate the need for operational planning