¡GoConqr estrena diseño! Cuéntanos qué te parece.

Regístrate gratis

Test

Parcial 2

Elvira González 16 preguntas

Hacer el test

Preguntas del test (16)

  1. 1About Perfect Forward Secrecy (PFS) in SSL/TLS, which of the following statements is FALSE?
    1. ARSA key exchange does not ensure PFS as the pre-master secret is transmitted through the network
    2. BDiffie-Hellman key exchange ensures PFS as the pre-master secret is not transmitted
      through the network
    3. CAfter the session is complete and both parties have deleted the session keys, the only way to decrypt the client-server communications is to attack each individual conversation
    4. DPFS was introduced because the way key material was exchanged in SSL by using the client RSA private key
  2. 2Which of the following statements is TRUE?
    1. ASSL sessions and SSL connections are used interchangeably
    2. BSSL session is created during the SSL/TLS handshake protocol
    3. COne SSL connection can be shared between several SSL sessions
    4. DNone of above
  3. 3 Which statement is FALSE in relation to MPLS VPN security?
    1. AMPLS VPN is established using a TCP/IP layer 4 protocol to provide end to end connectivity by traffic encapsulation
    2. BIPSec encryption and integrity are optional mechanisms
    3. CSupport TCP/IP layer 3 and layer 2 VPNs
    4. DIsolation between different customers is achieved by means of MPLS labels
  4. 4Which of the following statements is true?
    1. AThe setup of a communication for a TOR hidden service, finalize with a new dedicated TOR circuit between the user and the hidden service server
    2. BTOR network provides end to end anonymity and confidentiality in a communication
    3. CAll TOR Bridge nodes should be published as soon as they are created to increase the availability of the network and reduce censorship
    4. DNone of the above statements is true
  5. 5DNS Security Extensions (DNSSEC) provides
    1. AAuthenticity and integrity of the DNS messages
    2. BProtection against DDoS by amplification attacks
    3. CAvailability extending anycasts routing security
    4. DConfidentiality and integrity of the DNS messages
  6. 6About the spam mitigation techniques in electronic mail system:
    1. ADomain-based Message Authentication, Reporting and Conformance (DMARC) is a replacement of the Sender Policy Framework (SPF) and Domain Keys Identified Mail (DKIM) techniques
    2. BSPF depends on DNS protocol and DKIM in a public key infrastructure supported by a Certificate authority (CA)
    3. CBoth SPF and DKIM requires the use of DNS TXT resource records
    4. DSPF TXT resource record in DNS is configured by receiver MTA and checked by the sender MTA
  7. 7About TCP SYN Cookie
    1. AThe cookie is a 16-bit number sent by the server in the Sequence Number field and returned by the client in the Acknowledgment field increased by one
    2. BIn order for the cookie to be tampered-proof, a MAC is calculated over the cookie and appended to it
    3. CThis mechanism obliges the initiator to recompute the cookie and compare the one received from the responder. In doing so, the state allocation is no longer asymmetric
    4. DThe cookie is computed through an HMAC taking as input the following values; source and ...
  8. 8About the SSL3.0/TLS1.2 Handshake which of the following statement is FALSE?
    1. AThe ClientKeyExchange message is mandatory for both DHE and RSA key-based exchange
    2. BThe ServerKeyExchange message is mandatory for both DHE and RSA key-based exchange
    3. CThe ChangerCipherSpec message does not belong to the SSL Handshake protocol
    4. DClient authentication requires three additional messages: a CertificateRequest sent by the server, and both a Certificate and a CertificateVerify sent by the client
  9. 9About TLS version 1.3 handshake, which of the following statements is FALSE?
    1. AHandshake latency is reduced with the use of zero Round Time Trio (0-RTT).
    2. BA server supporting 0-RTT is immune to replay attacks as long as client and server share a PSK (pre-shared key) beforehand
    3. CThe client chooses first the ciphersuite and keys touse and the server accepts it
    4. DKey exchange methods disappear from ciphersuite negotiation, only DHE is supported
  10. 10Which of the following statement is TRUE?
    1. ATLS/SSL encrypts more information of the original IP datagram than IPsec does
    2. BOnly some exit nodes from 3 types of TOR network nodes (entry, middle and exit) are not publicly known to prevent censors to block the network
    3. CRegarding the following flavours of SSL VPN, port forwarding requires a thin client, while application translation only employs the web browser
    4. DNone of the above statements is true

Información

Descripción
Analista Comunicaciones Seguras Test sobre Parcial 2, creado por Elvira González el 07/12/2024.
Idioma
Español
Visitas
8
Etiquetas
comunicaciones segurasanalista
Valoración
Aún sin valoraciones
Valora este test
Valora este test

Escríbenos

¿Sobre qué es tu mensaje?

¿Qué te parece el nuevo diseño?

¿Te gusta?