Test
#2 Information security and data protection
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (60)
1This is the process of determining whether someone or something is, in fact, who or what it is declared to be.
- AConditional access
- BAuthentication
- CIdentification
- DAnonymizer
- EAuthorization
2In the original description, the Diffie-Hellman exchange by itself does not provide ____ of the communicating parties and is thus vulnerable to a man-in-the-middle attack
- APassword
- BTwo factor authentication
- CSecurity token
- DAuthentication
3 Why would reusing a ticket as a replay attack is Kerberos not be successful?
- AThe tickets are encrypted
- BThe tickets are digitally signed
- CThe tickets are used a token
- DThe tickets are time stamped
4What is Man in the middle attack?
- AThe attackers catch our employee in the middle of them and start applying physical pressure on them
- BThe attacker (man) hides inside (in the middle of) a crowd to sneak past the guards and cameras
- CThe hacker jacks in a network and records all the information sent over the network
5What is encryption strength is based on? Please select the best answer
- AThe strength of the algorithm, the length of the key, and the secrecy of the key
- BThe length of the key, the type of algorithm, and the strength of the key
- CThe privacy of the key, the length of the algorithm, and the strength of the key
- DThe strength of the key, the length of the algorithm, and the privacy of the key
6One form of ‘something you have’ is the _____ and USB tokens
- AFingerprint
- BTokens
- CIdentification
- DPassword
- EDigital signatures
7The process based on some physical, genetic, or otherwise human characteristic that cannot be duplicated is also known as (Please select the best answer)
- APassword authentication
- BPhysical authentication
- CFingerprint authentication
- DBiometric authentication
8What is a good way to make users in a network safer in the internet
- AGet a slow connection so they cannot download too much
- BDeny all internet access
- CAll of the above
- DNone of the above
- ESet up a filtering proxy server so you can check all the incoming traffic
9When an attacker captures part of a communication and later sends the communication segment to the server whilst pretending to be the user it is known as a
- AIt is known as the Man in the middle attack
- BIt is known as the TCP/IP spoofing attack
- CIt is known as the Back door attack
- DIt is known as the Replay attack
10In which of the following attack does the attacker capture a portion of the communication between two parties, modifies it, and inserts
- AMan-in-the-middle attack
- BSpoofing
- CSniffing
- DDenial-of-service
11A password represents
- ASomething you have
- BNone of the above
- CSomething you are
- DSomething you know
- EAll of the above
12List the main aspects of information security: I. Confidentiality II. Integrity III. Availability IV. Consistency
- AI-III-IV
- BI-III
- CI-II-III
- DI only
- EII-III-IV
13Which of the following describes the challenge-response
- AA workstation or system that generates a random challenge string that the user enters when prompted along with the proper PIN (Personal Identification Number)
- BA workstation or system that generates a random ID that the user enters when prompted along with the proper PIN (Personal Identification Number)
- CA special hardware device that is used to generate random text in a cryptography system
- DThe authentication mechanism in the workstation or system does not determine if the owner should be authenticated.
14Consider the Diffie-Hellman scheme with a common prime p=7 and primitive root (generator) g=3 if the user A has private key XA = 3, what is A’s public key RA?
- A6
- B8
- C9
- D16
15Suppose Bob wants to send a secret message to Alice using public key cryptography. Then Bob should
- AEncrypt the message with Alice’s public key and send Alice the message
- BEncrypt the message with Alice’s private key and send the encrypted message to Alice
- CEncrypt the message with his public key and send Alice the message
- DEncrypt the message with his private key and send the encrypted message to Alice
16Suppose Bob wants to send Alice a digital signature for the message m. To create the digital signature
- ABob applies a hash function to m and then encrypts the result with his private key
- BBob applies a hash function to m and then encrypts the result with his public key
- CBob applies a hash function to m and then encrypts the result with Alice’s public key
- DBob encrypts m with his private key and then applies a hash function to the result
17Suppose Alice receives from Bob a message m along with a digital signature for the message m. To verify that the message was not changed and that Bob indeed sent the message, Alice
- AApplies Bob's public key to the digital signature, applies the has function to m, and compares the results of the two operations;
- BApplies Bob's public key to the digital signature, then a de-hashing function to the result. She then compares the results of this last operation with the message m;
- CApplies a de-hashing function to the digital signature and compare the result to m;
- DNo correct answer;
18Suppose a CA contains Bob's certificate, which binds Bob's public key to Bob. This certificate is signed with
- AThe CA's private key
- BBob’s public key
- CThe CA's public key
- DBob’s private key
19A well designed and configured ____ is like having a single point of entry into your building with a security guard at the door allowing only authorized personnel into the building.
- ANetwork Adapter
- BAntivirus Software
- CIntrusion Detection System
- DFirewall
20Which security action should be finished before access is given to the network?
- AIdentification and authorization
- BIdentification and authentication
- CAuthentication and authorization
- DAuthentication and password
21Which of the following types of encryption would BEST to use for a large amount of data?
- AAsymmetric
- BSymmetric
- CRSA
- DHash
22Which statement correctly describes the difference between a secure cipher and a secure hash?
- AA hash produces a variable output for any input size; a cipher does not.
- BA cipher can be reversed; a hash cannot.
- CA cipher produces the same size output for any input size; a hash does not.
23This is a trial and error method used to decode encrypted data through exhaustive effort rather than employing intellectual strategies.
- ADecryption
- BCryptanalysis
- CCryptography
- DBrute force cracking
24Making sure that the data has not been changed unintentionally, due to an accident or malice, is:
- AAuditability
- BAvailability
- CIntegrity
- DConfidentiality
25Which of the following appears when an asset of the system become lost, unavailable or unusable?
- AInterception
- BInterruption
- CInterpretation
- DModification
- EFabrication
26Show incorrect kind of threats
- AInterception
- BInterruption
- CInterpretation
- DModification
- EFabrication
27Bock cipher maps each plaintext block to :
- ASame length cipher text block
- BDifferent length cipher text block
- CThe same letter
- DNo answer
28What is vulnerability?
- AA weakness in the security system
- BA Method which uses flaws to have more access, privileges or resources to the system
- CA method which used to eliminate or reduce threats
- DA kind of auth to system
29A(n) _____ application monitors all incoming and outgoing network traffic and block unauthorized packets from getting through
- AAntivirus
- BIntrusion Detection System (IDS)
- CPersonal Firewall
- DNetwork Monitor
30What is assumed by cipher in cryptography ?
- AAlgorithm for performing encryption and decryption
- BEncrypted message
- CNone of mentioned
- DRaw message
- EAll of mentioned
31What is assumed by ciphertext in cryptography?
- AAlgorithm for performing encryption and decryption
- BEncrypted message
- CNone of mentioned
- DRaw message
- EAll of mentioned
32What is assumed by plaintext in cryptography?
- AAlgorithm for performing encryption and decryption
- BEncrypted message
- CNone of mentioned
- DRaw message
- EAll of mentioned
33In cryptography, what is key?
- AInfo used to cipher, known only to sender and receiver
- BAlgorithm for transforming plaintext to ciphertext
- CEncrypted message
- DRecovering plaintext from ciphertext
- EConverting plaintext to ciphertext
34What is cryptoanalysis?
- AStudy of principles/methods deciphering ciphertext without knowing key
- BInfo used to cipher, known only to sender and receiver
- CAlgorithm for transforming plaintext to ciphertext
- DRecovering plaintext from ciphertext
- EConverting plaintext to ciphertext
35In asymmetric key cryptography, the public key for decryption is kept by:
- ASender
- BReceiver
- CSender and receiver
- DEveryone in the network
- EAll the connected devices to the network
36Which of these are threats against to modern computer?
- ANetwork attacks, firewall and worms
- BViruses, worms and encryption
- CNetwork attacks, viruses and worms
- DViruses, network encryptions and worms
37How the industry solves the threats ?
- AFirewall, IDS, Kerberos, blogs
- BIDS, firewall, authentication, policies
- CVirus, worms, attacks, web-sites
- DNetwork attacks, IDS, worms, virus
38Which one of the following algorithm is not used in asymmetric key cryptography?
- ARSA algorithm
- BDiffle-Hellman algorithm
- CDES algorithm
- DDSA algorithm
39In cryptography, the order of the order of the letters in a message in rearranged by
- ATranspositionalcip ciphers
- Bsubstitution ciphers
- CAll kinds of the ciphers
- DNone of the mentioned
40What is data encryption standard (DES)?
- ABlock cipher
- Bstream cipher
- Cbit cipher
- Dnone of the mentioned
41Cryptanalysis is used:
- ATo find some insecurity in cryptographic scheme
- Bto increase the speed
- Cto encrypt the data
- Dnone of the mentioned
42Cryptographic hash function takes an arbitrary block of data and returns
- AFixed site bit string
- Bvariable size bit string
- Cnone of the mentioned
- Dboth of the mentioned
43A substitution cipher substitutions one symbol with
- AKeys
- BOthers
- CMulti Parties
- DSingle Party
44An asymmetric-key(or public key ) cipher uses
- A1 key
- B2 key
- C3 key
- D4 key
45In the computer industry the “What you have” method is use of?
- APasswords
- BSmart cards
- CDigital certificates’
46A smartcard represents
- ANone of the above
- BSomething you are
- CAll of the above
- DSomething you have
- ESomething you know
47Convert one symbol of plaintext immediately into a symbol of cipher text (example:Caesar cipher)
- AEncryption
- BPlaintext
- CBlock cipher
- Dstream ciphers
48Interruption is
- AAsset lost, unusable, unavailable
- BUnauthorized access
- CUnauthorized change, tamper of data
- DEx. Unauthorized add data to a DB
49Modification is
- AUnauthorized change, tamper of data
- BAsset lost, unusable, unavailable
- CUnauthorized access
- DEx. Unauthorized add data to a DB
50Which are the examples of DEFENCE?
- AFirewalls, router access control list, spam filters, virus scanners
- BEmployee communication, policy on company Intranet
- CAudit logs, intrusion detection system, network traffic monitoring
- DNetwork attacks, IDS, worms, virus
51Which are the examples of DETERRENCE?
- AEmployee communication, policy on company Intranet
- BFirewalls, router access control list, spam filters, virus scanners
- CAudit logs, intrusion detection system, network traffic monitoring
- DNetwork attacks, IDS, worms, virus
52Which are the examples of DETECTION?
- AAudit logs, intrusion detection system, network traffic monitoring
- BEmployee communication, policy on company Intranet
- CFirewalls, router access control list, spam filters, virus scanners
- DNetwork attacks, IDS, worms, virus
53What is encryption?
- AIs the process of encoding a message so that its meaning is not obvious
- BIs the reverse process, transforming an encrypted message back into its normal, original form
- CIs the process of preventing any attacks from the hackers
54In password protection, this is a random string of data or number used to modify a password hash
- ANonce
- BSsl
- COne time password
- DSecret key
- EPublic key
55Using public key cryptography suppose Bob wants to send a secret message to Alice and Alice wants to be sure that the message was indeed sent by Bob. Then Bob should:
- AEncrypt the message with his private key, encrypt the result with Ailce’s public key and then send Alice the message
- B• Encrypt the message with his private key , encrypt yhe result with alices’ private key, and then send Alicce the message
- C• Encrypt the message with his public key, encrypt the result with Alice’s public key, and then send Alice the message
56Which statement correctly describes the difference between a secure cipher and a secure hash?
- ACipher can be reversed, hash cannot
- BA hash can be reversed, a cipher cannot
- CA hash production a variable output fot any input size, a cipher does not
- DA cipher produces the same size output for any input size, a hash does not
57This is a trial and error method used to decode encrypted data through exhaustive effort rather than employing intellectual strategies
- A• Brute force cracking
- B• Decryption
- C• Cryptoanalysis
- D• Cryptography
58A well designed and configured _____ is like having single point of entry into your building with a security guard at the door allowing only authorized personnel into the building
- AFirewall
- BNetwork adapter
- CAntivirus software
- DIntrusion detection system
59Suppose a CA contains Bob’s certificate, which binds Bob’s public key to Bob. This certificate is signed with
- AThe CA’s private key
- BBobs public key
- CThe CAs public key
- DBobs private key
60Suppose Alice receives from Bob a message m with digital signature for one message m. To verify that the message was not changed and that Bob indeed sent the message, Alice
- AApplies Bob’s public key to the digital signature applies to the hash function to m, and compares the results of the two operations.
- BApplies bobs public key to the digital signature, then a de-hashing function to the result. She then compares the result of this operation with the message m
- CApplies a de-hashing function to the digital signature and compares the result m
- DNo correct answer
Información
- Descripción
- - at Test sobre #2 Information security and data protection, creado por хомяк убийца el 13/05/2018.
- Autor
- хомяк убийца
- Idioma
- English
- Visitas
- 994
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test