Test
Exam 2 Quizzes
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (40)
1Public key cryptography is symmetric, as it uses two separate keys, instead of one.
- AVerdadero
- BFalso
2When generating random numbers for use in cryptography it is important that no one value in a sequence can be inferred from the others.
- AVerdadero
- BFalso
3Signature Detection is designed to detect zero day exploits.
- AVerdadero
- BFalso
4A worm can potentially be identified through the use of anomaly detection techniques like noticing that hosts are using ports that they do not normally use.
- AVerdadero
- BFalso
5The primary benefit of a Host-based Intrusion detection system is that it can detect both external and internal intrusions.
- AVerdadero
- BFalso
6Read the following article: https://graquantum.com/failure-of-intrusion-detection-systems-3/ (Links to an external site.)
The article discusses the EINSTEIN IDS. Which type of IDS is this most likely to be?- AMisuse/Signature Detection or Rule based
- BNone of the above
- CAnomaly based detection
- DMachine learning based
7For hash function H, if it’s computationally infeasible to find any pair (x, y) such that H(x) = H(y), H is:
- AA. Weak Collision resistant
- BB. String Collision resistant
- CC. Preimage resistant
- DD. Fixed length
- ENone of the Above
8All of the following algorithms can be used for digital signatures except:
- ADSS
- BDiffie-Helman
- CRSA
- DElliptic Curve
9Which of the following are not principal components in a public-key encryption scheme:
- AA Plaintext and Ciphertext
- BEncryption and Decryption algorithms
- CA Public and Private Key
- DA cryptanalysis and intrusion detection report.
10Which of the following is NOT a possible approach to classifying behaviors in anomaly detection:
- AFuzzy Logic
- BGenetic Algorithms
- CNone of the Above
- DTime Series Models
- EKnowledge Based Classification Approaches
- FBayesian networks
11A stream cipher processes the input one block of elements at a time, producing an output block for each input block.
- AVerdadero
- BFalso
12The block size of SHA-512 is 512.
- AVerdadero
- BFalso
13The purpose of the Diffie-Hellman key exchange algorithm is to enable two users to exchange a public key securely that can then be used for subsequent encryption of messages.
- AVerdadero
- BFalso
14The communication between the Security service module and the Key distribution center is encrypted using a session key.
- AVerdadero
- BFalso
15Because of weaknesses in the RC4 algorithm, key lengths of 256 bits are considered susceptible to attack.
- AVerdadero
- BFalso
16Which of the following is NOT a possible approach to attacking the RSA algorithm:
- ABrute Force
- BMathematical Attacks
- CTiming Attacks
- DChosen Ciphertext Attacks
- EAll of the Above
- FNone of the Above
17Which of the following is NOT one of the five block cipher modes of operation.
- AElectronic Code book (ECB)
- BCipher Block Chaining (CBC)
- CData Encryption Standard (DES)
- DCipher Feedback (CFB)
- ECounter (CTR)
- FNone of the Above
18Which of the following is not an ingredient of a symmetric encryption scheme:c
- APlaintext
- BCiphertext
- CEncryption algorithm
- DPublic key
- EAll of the above
- FNone of the above
19Which of the following is a method of attacking RSA mathematically?
- AFactor N into P and Q
- BDetermine φ(N) without finding p and q
- CDetermine D without determining φ(N)
- DAll of the above
- ENone of the above
20An encryption system that protects both the confidentiality and the integrity of communications is called which of the following?
- AAuthenticated Encryption (AE)
- BSecure Hashing Algorithm (SHA)
- CHashed Message Authentication Code (HMAC)
- DRivest-Shamir-Adleman Encryption Algorithm (RSA)
21Diffie Helman Key Exchange allows two users to privately share a key and establish a secure channel regardless of an observer or bad actor.
- AVerdadero
- BFalso
22 In Kerberos, the authentication server shares a unique secret key with each authorized computer on the network.
- AVerdadero
- BFalso
23Sending a key to someone in the mail would allow you and that other person to privately share a key and establish a secure channel regardless of an observer or bad actor.
- AVerdadero
- BFalso
24SHA-2 are more useful for so-called “embedded” or smart devices that connect to electronic networks rather than the full-fledged computers because of its relatively compact nature.
- AVerdadero
- BFalso
25One problem inherent in public-key infrastructure (PKI) is that not all certificate authorities (CAs) are equally trustworthy.
- AVerdadero
- BFalso
26Read the following article: https://www.cryptomathic.com/news-events/blog/3des-is-officially-being-retired (Links to an external site.) What is triple DES vulnerable to?
- ACollision attacks
- BExhaustive Key Search
- CLeaks plaintexts in short messages
27Which of the following is not a problem with the PKI (public-key infrastructure) model described in X.509 standard ?
- AThe reliance on the user to make an informed decision when there is a problem verifying a certification.
- BThere is a single internationally specified hierarchy of government regulated CAs.
- CDifferent implementations use different “trust stores”, and hence present different security views to users.
- DThe assumption that all of the CAs in the “trust store” are equally trusted, and apply equivalent policies.
28Which statement is NOT TRUE about X.509:
- ACA certificates can be used for verifying server and other client identities.
- B“end user” certificate can be used for signing or encrypting emails.
- CNone of the above
- DAll of the above
29Kerberos makes use of a protocol that involves:
- AClients
- BApplication servers
- CA Kerberos server
- DAll of the above
30What are the stages of AES:
- ASubstitute Bytes
- BShift Rows
- CMix Columns
- DAdd Round key
- EAll of the above
31The U.S. Digital Millennium Copyright Act (DMCA) prohibits almost all unauthorized decryption of copyright protected content.
- AVerdadero
- BFalso
32 A threat is the potential for loss computed as the combination of the likelihood that a given threat exploits some vulnerability to an asset, and the magnitude of harmful consequence that results to the asset’s owner.
- AVerdadero
- BFalso
33 A code of conduct is an integral part of ensuring that employees follow a precise set of laws.
- AVerdadero
- BFalso
34Change management is an audit process to review the organization’s security processes.
- AVerdadero
- BFalso
35 For risk treatment, the definition of risk avoidance is not proceeding with the activity that creates the risk.
- AVerdadero
- BFalso
36Read this article - https://www.wired.com/story/apple-app-store-malware-click-fraud/ (Links to an external site.). What kind of malware is discussed in this article?
- ATrojans
- BAdwares
- CViruses
- DWorms
37In terms of policy, guidelines managing the use and reuse of big data that ensure participants can make informed decisions about their participation best describes:
- APrivacy and confidentiality
- BConsent
- CData sharing
- DGovernance and custodianship
38Which of the following security control classes contain Detection and Recovery Controls:
- AManagement Controls
- BOperational Controls
- CTechnical Controls
- DAll of the Above
- ENone of the Above
39Which of the following isn’t a distinguished primary type of property according to the US Legal System:
- AReal Property
- BPersonal Property
- CIntellectual Property
- DMovable Property
40Which of the following handles financial transactions and royalty payments in a digital rights management (DRM) system:
- ASecurity Researchers
- BClearing Houses
- CPatent Offices
- DLaw Enforcement Agencies
- ENone of the Above
Información
- Descripción
- Test sobre Exam 2 Quizzes, creado por Nathan Ross el 23/04/2020.
- Autor
- Nathan Ross
- Idioma
- English
- Visitas
- 3
- Valoración
- Aún sin valoraciones Valora este test