PQC for TLS and Web Services

Final Quiz

Connecting to LMS... Progress: in progress

Assessment

1. Why does PQC matter for TLS and web services? A. TLS uses public-key cryptography during parts of the handshake, and some current public-key algorithms are considered quantum-vulnerable. B. TLS does not use cryptography. C. PQC replaces all web application security controls. D. PQC is only used for graphic design.

2. What does TLS commonly protect? A. Only local desktop wallpaper settings. B. Web, API, and service communication by providing confidentiality, integrity, and authentication features. C. Only printed documents. D. Only database table names.

3. What is harvest-now, decrypt-later risk? A. A certificate renewal method. B. A load balancer setting. C. The risk that encrypted traffic collected today may be decrypted later if the public-key protection becomes breakable. D. A password reset workflow.

4. Which cryptographic role is most associated with establishing shared key material during a TLS handshake? A. Image compression. B. Log rotation. C. User interface rendering. D. Key establishment.

5. What does symmetric encryption usually protect in TLS after the handshake? A. Application data in transit. B. Browser bookmarks only. C. Certificate authority business records only. D. Source code formatting.

6. What is ML-KEM conceptually? A. A database query language. B. A post-quantum key encapsulation mechanism. C. A web analytics script. D. A certificate color scheme.

7. What are ML-DSA and SLH-DSA conceptually? A. Network routing protocols. B. Backup file formats. C. Post-quantum digital signature algorithms. D. Browser cache policies.

8. Why is key establishment different from digital signatures? A. They are always identical. B. Digital signatures encrypt all application traffic by themselves. C. Key establishment replaces certificates in every case. D. Key establishment helps create shared key material, while digital signatures help authenticate and verify integrity.

9. What is hybrid key exchange in a post-quantum transition context? A. Combining classical and post-quantum mechanisms during key establishment. B. Removing encryption from TLS. C. Replacing all certificates with passwords. D. Disabling protocol negotiation.

10. Why can hybrid key exchange help during migration? A. It guarantees no implementation defects. B. It can help manage transition risk while classical and post-quantum ecosystems mature. C. It removes the need for testing. D. It makes inventory unnecessary.

11. What is downgrade risk? A. A risk that dashboards use small fonts. B. A risk that certificates are renewed too early. C. A risk that negotiation or fallback behavior may result in weaker protection than intended. D. A risk that logs are too readable.

12. Why are certificates and PKI important for PQC web planning? A. Certificates are unrelated to TLS. B. PKI affects only database backups. C. Certificates eliminate all migration work. D. Web trust depends on certificate chains, certificate authorities, client support, signature algorithms, and ecosystem compatibility.

13. Why is TLS endpoint inventory important? A. It identifies websites, APIs, gateways, proxies, services, certificates, libraries, owners, and dependencies that may need migration planning. B. It replaces testing. C. It guarantees browser support. D. It removes the need for change management.

14. What should deployment testing include? A. Only changing the production endpoint first. B. Client compatibility, performance, handshake behavior, monitoring, rollback, and operational impact. C. Only checking a logo. D. Only deleting old records.

15. Why should teams avoid custom TLS cryptography? A. Custom cryptography is always safer. B. Custom TLS guarantees compatibility. C. Standards-based protocols and mature libraries are safer than unreviewed custom constructions. D. Custom cryptography removes the need for PKI.

16. Which statement best summarizes PQC readiness for TLS and web services? A. It is a panic-driven replacement of every endpoint without testing. B. It is only a theoretical math topic. C. It is a method for unauthorized decryption. D. It is a practical migration effort involving inventory, prioritization, standards-based mechanisms, compatibility testing, staged deployment, monitoring, vendor coordination, and crypto agility.