Quiz
Exam 2 Quizzes
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (40)
1Public key cryptography is symmetric, as it uses two separate keys, instead of one.
- ATrue
- BFalse
2When generating random numbers for use in cryptography it is important that no one value in a sequence can be inferred from the others.
- ATrue
- BFalse
3Signature Detection is designed to detect zero day exploits.
- ATrue
- BFalse
4A worm can potentially be identified through the use of anomaly detection techniques like noticing that hosts are using ports that they do not normally use.
- ATrue
- BFalse
5The primary benefit of a Host-based Intrusion detection system is that it can detect both external and internal intrusions.
- ATrue
- BFalse
6Read the following article: https://graquantum.com/failure-of-intrusion-detection-systems-3/ (Links to an external site.)
The article discusses the EINSTEIN IDS. Which type of IDS is this most likely to be?- AMisuse/Signature Detection or Rule based
- BNone of the above
- CAnomaly based detection
- DMachine learning based
7For hash function H, if it’s computationally infeasible to find any pair (x, y) such that H(x) = H(y), H is:
- AA. Weak Collision resistant
- BB. String Collision resistant
- CC. Preimage resistant
- DD. Fixed length
- ENone of the Above
8All of the following algorithms can be used for digital signatures except:
- ADSS
- BDiffie-Helman
- CRSA
- DElliptic Curve
9Which of the following are not principal components in a public-key encryption scheme:
- AA Plaintext and Ciphertext
- BEncryption and Decryption algorithms
- CA Public and Private Key
- DA cryptanalysis and intrusion detection report.
10Which of the following is NOT a possible approach to classifying behaviors in anomaly detection:
- AFuzzy Logic
- BGenetic Algorithms
- CNone of the Above
- DTime Series Models
- EKnowledge Based Classification Approaches
- FBayesian networks
11A stream cipher processes the input one block of elements at a time, producing an output block for each input block.
- ATrue
- BFalse
12The block size of SHA-512 is 512.
- ATrue
- BFalse
13The purpose of the Diffie-Hellman key exchange algorithm is to enable two users to exchange a public key securely that can then be used for subsequent encryption of messages.
- ATrue
- BFalse
14The communication between the Security service module and the Key distribution center is encrypted using a session key.
- ATrue
- BFalse
15Because of weaknesses in the RC4 algorithm, key lengths of 256 bits are considered susceptible to attack.
- ATrue
- BFalse
16Which of the following is NOT a possible approach to attacking the RSA algorithm:
- ABrute Force
- BMathematical Attacks
- CTiming Attacks
- DChosen Ciphertext Attacks
- EAll of the Above
- FNone of the Above
17Which of the following is NOT one of the five block cipher modes of operation.
- AElectronic Code book (ECB)
- BCipher Block Chaining (CBC)
- CData Encryption Standard (DES)
- DCipher Feedback (CFB)
- ECounter (CTR)
- FNone of the Above
18Which of the following is not an ingredient of a symmetric encryption scheme:c
- APlaintext
- BCiphertext
- CEncryption algorithm
- DPublic key
- EAll of the above
- FNone of the above
19Which of the following is a method of attacking RSA mathematically?
- AFactor N into P and Q
- BDetermine φ(N) without finding p and q
- CDetermine D without determining φ(N)
- DAll of the above
- ENone of the above
20An encryption system that protects both the confidentiality and the integrity of communications is called which of the following?
- AAuthenticated Encryption (AE)
- BSecure Hashing Algorithm (SHA)
- CHashed Message Authentication Code (HMAC)
- DRivest-Shamir-Adleman Encryption Algorithm (RSA)
21Diffie Helman Key Exchange allows two users to privately share a key and establish a secure channel regardless of an observer or bad actor.
- ATrue
- BFalse
22 In Kerberos, the authentication server shares a unique secret key with each authorized computer on the network.
- ATrue
- BFalse
23Sending a key to someone in the mail would allow you and that other person to privately share a key and establish a secure channel regardless of an observer or bad actor.
- ATrue
- BFalse
24SHA-2 are more useful for so-called “embedded” or smart devices that connect to electronic networks rather than the full-fledged computers because of its relatively compact nature.
- ATrue
- BFalse
25One problem inherent in public-key infrastructure (PKI) is that not all certificate authorities (CAs) are equally trustworthy.
- ATrue
- BFalse
26Read the following article: https://www.cryptomathic.com/news-events/blog/3des-is-officially-being-retired (Links to an external site.) What is triple DES vulnerable to?
- ACollision attacks
- BExhaustive Key Search
- CLeaks plaintexts in short messages
27Which of the following is not a problem with the PKI (public-key infrastructure) model described in X.509 standard ?
- AThe reliance on the user to make an informed decision when there is a problem verifying a certification.
- BThere is a single internationally specified hierarchy of government regulated CAs.
- CDifferent implementations use different “trust stores”, and hence present different security views to users.
- DThe assumption that all of the CAs in the “trust store” are equally trusted, and apply equivalent policies.
28Which statement is NOT TRUE about X.509:
- ACA certificates can be used for verifying server and other client identities.
- B“end user” certificate can be used for signing or encrypting emails.
- CNone of the above
- DAll of the above
29Kerberos makes use of a protocol that involves:
- AClients
- BApplication servers
- CA Kerberos server
- DAll of the above
30What are the stages of AES:
- ASubstitute Bytes
- BShift Rows
- CMix Columns
- DAdd Round key
- EAll of the above
31The U.S. Digital Millennium Copyright Act (DMCA) prohibits almost all unauthorized decryption of copyright protected content.
- ATrue
- BFalse
32 A threat is the potential for loss computed as the combination of the likelihood that a given threat exploits some vulnerability to an asset, and the magnitude of harmful consequence that results to the asset’s owner.
- ATrue
- BFalse
33 A code of conduct is an integral part of ensuring that employees follow a precise set of laws.
- ATrue
- BFalse
34Change management is an audit process to review the organization’s security processes.
- ATrue
- BFalse
35 For risk treatment, the definition of risk avoidance is not proceeding with the activity that creates the risk.
- ATrue
- BFalse
36Read this article - https://www.wired.com/story/apple-app-store-malware-click-fraud/ (Links to an external site.). What kind of malware is discussed in this article?
- ATrojans
- BAdwares
- CViruses
- DWorms
37In terms of policy, guidelines managing the use and reuse of big data that ensure participants can make informed decisions about their participation best describes:
- APrivacy and confidentiality
- BConsent
- CData sharing
- DGovernance and custodianship
38Which of the following security control classes contain Detection and Recovery Controls:
- AManagement Controls
- BOperational Controls
- CTechnical Controls
- DAll of the Above
- ENone of the Above
39Which of the following isn’t a distinguished primary type of property according to the US Legal System:
- AReal Property
- BPersonal Property
- CIntellectual Property
- DMovable Property
40Which of the following handles financial transactions and royalty payments in a digital rights management (DRM) system:
- ASecurity Researchers
- BClearing Houses
- CPatent Offices
- DLaw Enforcement Agencies
- ENone of the Above
Information
- Description
- Quiz on Exam 2 Quizzes, created by Nathan Ross on 23/04/2020.
- Author
- Nathan Ross
- Language
- English
- Views
- 3
- Rating
- No ratings yet Rate this quiz