ISC2 · CISSP
PKI, signatures, and cryptanalytic attacks
CISSP · Lesson 14 of 34 · 1:37:36
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: public key infrastructure and certificates, digital signatures, cryptanalytic attacks, adversary-in-the-middle, pass the hash, Kerberos exploitation, ransomware, zero-day attacks, and AI threats like model poisoning and deepfakes. Includes three original practice questions.
Preview the topics
- The infusion pump vendor signs each firmware update. What does the pump use to check the signature?
- An attacker steals an administrator’s password hash from one workstation, and uses it to sign in to a server, without cracking it. What attack is this?
- A finance clerk gets a phone call in the voice of the chief financial officer, asking for an urgent payment to a new account. What is the best defense?