Five exam-style questions. Each tests a distinction the AP exam loves: hash vs encrypt, fast hash vs slow hash, plain hash vs HMAC, high-entropy vs low-entropy data, collision resistance vs pre-image resistance.
5 Questions~10 minScored · Exam-style
How to Approach
Predict-first: For each scenario, categorize the use case (file integrity / password storage / API authentication / signature / low-entropy data).
Remember: SHA-256 is fast (good for files, bad for passwords). bcrypt/Argon2 is slow (good for passwords). HMAC adds authenticity. Encryption reverses; hashing does not. MD5 and SHA-1 are broken.
Score0 / 5
Question 1
A developer asks: 'We need to store user passwords. Which of these is correct for a 2026 deployment?'
✎ Predict before reading options. Commit to your answer first.
Exam TipPasswords: Argon2id (or bcrypt) + auto salt. Never SHA-family. Never encryption. Never MD5.
Question 2
Which of the following statements about cryptographic hash functions is TRUE?
I. A good cryptographic hash is both fast and one-way. II. MD5 is still acceptable for digital signatures if messages are short. III. SHA-256 is appropriate for storing passwords if combined with a strong salt.
✎ Predict before reading options. Commit to your answer first.
Exam TipFast hash = good for integrity, bad for passwords. Slow hash (bcrypt/Argon2) = good for passwords.
Question 3
A web application wants to ensure that incoming API requests from partner services have not been tampered with AND originate from partners who hold the shared secret. Which cryptographic primitive is appropriate?
✎ Predict before reading options. Commit to your answer first.
Exam Tip'Integrity + authenticity with a shared secret' = HMAC. Plain hash = integrity only.
Question 4
A company hashes customer Social Security numbers with SHA-256 before storing them, claiming this 'anonymizes' the data. A security consultant says this is inadequate. Why?
✎ Predict before reading options. Commit to your answer first.
Exam TipHashing does NOT protect low-entropy data (SSNs, CC numbers, phone numbers, birthdates). Use tokenization or encryption.
Question 5
A team is reviewing their code signing pipeline. Binaries are currently signed with SHA-1 digests. Sales wants to know: 'Is there any reason to migrate to SHA-256? It's extra work.' Which statement best captures the security case?
✎ Predict before reading options. Commit to your answer first.
Exam TipSHA-1 collision resistance broken (SHAttered 2017) + signatures depend on collision resistance = signature forgery path. Migration to SHA-256 is required.
Whether you're a student, parent, or teacher — I'd love to hear from you.
Just want free AP CS resources?
Enter your email below and check the subscribe box — no message needed.
Students get daily practice questions and study tips. Teachers get curriculum resources and teaching strategies.
Typically responds within 24 hours
✓
Message Sent!
Thanks for reaching out. I'll get back to you within 24 hours.
34.8% of Tanner’s CSP students score 5s. The national average is 9.6%.
I’m a Student
I’m a Teacher
✓Free AP CSP Big Ideas cheat sheet (PDF)
✓Daily practice questions covering all 5 Big Ideas
✓Create Task tips that actually work — from a real AP teacher
✓Free class codes with student progress tracking
✓3 full practice exams + Top 100 questions for your class
✓Create Task guidance and pseudocode reference sheets
Which AP CS exams are you prepping for?
✓
You’re in!
Your Big Ideas cheat sheet is on its way.
No thanks, I’ll figure it out myself
Avg student improvement: 2+ score levels | Real AP teacher, not just a tutor
AP Cybersecurity — National Launch 2026–27
Get Early Access to AP Cyber
AP Cyber launches nationally fall 2026. Get in early to help shape the course — start free with Unit 1 and the free teacher gradebook.
✓
You’re in — you’re on the AP Cyber early-access list!
Tanner will follow up personally within 48 hours. Your feedback will directly shape what gets built.
Step 1 of 4
Early Access — Limited Spots
Who are you?
Are you a teacher or a student?
I’m a Teacher
I’m a Student
Free to start — Unit 1 and the teacher gradebook are always free, no credit card.
Founding teachers unlock all 5 units and get direct input on what we build.
Not interested right now
Step 2 of 4
Your School
Tell us about your class
Other AP CS courses you teach
Your Situation
Tell us about yourself
Step 3 of 4
Classroom Needs
What does your classroom need? (select all that apply)
How You Study
What would help you most? (select all that apply)
Step 4 of 4
Almost Done
Where should we send your early-access details?
Free gradebook + Unit 1 | Your feedback shapes the course | Built by a real AP teacher