Test
Security
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (17)
1Describe the difference between authentication and authorisation.
- AAuthentication: proving identity; Authentication verifies who you are
Authorisation: specifying access rights to specific services/ resources. What you are authorized to do. - BAuthentication: specifying access rights to specific services/ resources. What you are authenticate to do.
Authorisation: proving identity; Authorisation verifies who you are
- AAuthentication: proving identity; Authentication verifies who you are
2What is a hash function?
- AA hash function converts a document into a relative small value (e.g. 256 bits).
- BA hash function converts a document into a relative long values (e.g. 256 bits).
- CA hash function converts passwords into a secret value (e.g. 256 bits).
3Describe two attacks on hash-functions.
- Aa pre-image attack:
given x, find y such that: H(y)=x
collision resistance:
find two messages x & y with same hash so H(x) = H(y) - Brainbow table:
search in a database for the hash that belongs to the passwords
collision resistance:
find two messages x & y with same hash so H(x) = H(y)
- Aa pre-image attack:
4Mention two well known hash-functions
- AMD5, SHA1, SHA2, SHA3
- BMD1, MD2, MD3, SHA2
- CBlowfish, MD5, JWT
5What is meant by message integrity?
- AThe certainty that a message has not been modified
- BThe certainty that a message has been modified
- CThe certainty that a message can been modified
6How can message integrity be obtained?
- AMessage integrity can be obtained by adding a MAC value (or an encrypted hash-value) to the message.
- BMessage integrity can be obtained by adding a JSON web token value (or an encrypted hash-value) to the message.
- CMessage integrity can be obtained by adding a MD5 value (or an encrypted hash-value) to the message.
- DMessage integrity can be obtained by adding a SHA3 value (or an encrypted hash-value) to the message.
7Describe the difference between a hash value and a message authentication code (MAC).
- AA MAC also serves the purpose of authentication.
The MAC value is made with a key of the sender.
A hash value can not be used for authentication. - BA hash value serves the purpose of authentication.
The hash value is made with a key of the sender.
A MAC value can not be used for authentication. - CA MAC also serves not the purpose of authentication.
The MAC value is made with a key of the sender.
A hash value can be used for authentication.
- AA MAC also serves the purpose of authentication.
8Which key is part of a digital certificate?
- AThe public key of the owner
- BThe private key of the owner
- CThe hashed key
- DThe public key of the digital certificate
9Describe how digital certificates are signed.
- AFirst the hash value of the document is calculated and after that the hash value is encrypted with the private key of the (issuing) certificate authority.
- BFirst the certificate of the document is calculated and after that the certificate is encrypted with the private key of the (issuing) certificate authority.
- CFirst the hash value of the public key is calculated and after that the hash value is encrypted with the private key of the (issuing) certificate authority.
10Why is private/ public key cryptography called asymmetric?
- AAsymmetric because the key for encrypting is not equal to the key for decrypting.
- BAsymmetric because the key for decrypting is equal to the key for encrypting.
- CAsymmetric because the key for decrypting is not equal to the key for encrypting.
11What is RSA?
- AAn algorithm (based on prime numbers) to calculate sets of private and public keys. It is very important that the private key can not be calculated from the public key.
- BAn certificate hash (based on prime numbers) to calculate sets of private and public keys. It is very important that the private key can not be calculated from the public key.
12What is a cipher suite in the context of TLS?
- AA cipher suite is a combination of security-protocols on which client and server agree upon.
- BA cipher suite is a choice of security-protocols on which keys the server agree upon.
- CA cipher suite is a combination of security-protocols on which keys the server agree upon.
13Describe the function of the record protocol within TLS
- AThe record protocol is responsible for data-encryption and adding MAC-values within a tls-session.
- BThe record protocol is responsible for data-decryption and adding MAC-values within a tls-session.
- CThe record protocol is responsible for data-encryption and adding hash values within a tls-session.
14Describe three TLS vulnerabilities within mobile apps
- ACertificate not checked by the client software
- BHost name in the certificate not verified by the client software
- CTLS-errors ignored by the client software
- DPrivate key in the certificate not verified by the client software
- ENo TLS-errors initialized
15Describe three ways to add security to a JAX-RS restserver.
- ASecuring RESTful Web Services Using web.xml
- BSecuring RESTful Web Services Using SecurityContext
- CSecuring RESTful Web Services Using Annotations
- DSecuring RESTful Web Services Using TLS certificates
- ESecuring RESTful Web Services Using hash values
- FSecuring RESTful Web Services Using public and private keys
16Describe the meaning of ROLES in JAX-RS
- AAccess to resources is granted based on the role of the user.
- BAccess to resources is granted based on the role of the software.
- CAccess to resources is granted based on the role of the application.
- DAccess to resources is granted based on the role of the server.
17What kind information is stored in a cacerts-file?
- AThe cacerts file is a collection of trusted certificate authority (CA) certificates.
- BThe cacerts file is a collection of trusted device certificates.
- CThe cacerts file is a collection of trusted connection authority (CA) certificates.
Información
- Descripción
- Test sobre Security, creado por Boy Achternaam el 29/01/2018.
- Autor
- Boy Achternaam
- Idioma
- English
- Visitas
- 0
- Valoración
- Aún sin valoraciones Valora este test