信息安全工程師每日一練試題（2022/9/4）
分享到微信
信息安全工程師當天每日一練試題地址：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：m.xiexiliangjiufa.com/class/27/e6_1.html
信息安全工程師每日一練試題（2022/9/4）在線測試：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6&day=2022/9/4
點擊查看：更多信息安全工程師習題與指導
信息安全工程師每日一練試題內(nèi)容（2022/9/4）
試題1
網(wǎng)絡流量數(shù)據(jù)挖掘分析是對采集到的網(wǎng)絡流量數(shù)據(jù)進行挖掘，提取網(wǎng)絡流量信息，形成網(wǎng)絡審計記錄。網(wǎng)絡流量數(shù)據(jù)挖掘分析主要包括：郵件收發(fā)協(xié)議審計、網(wǎng)頁瀏覽審計、文件共享審計、文件傳輸審計、遠程訪問審計等。其中文件傳輸審計主要針對（ ）協(xié)議。
A．SMTP
B．FTP
C．Telnet
D．HTTP查看答案
試題參考答案：B
試題2
基于公開密鑰的數(shù)字簽名算法對消息進行簽名和驗證時，正確的簽名和驗證方式是（ ）。
A.發(fā)送方用自己的公開密鑰簽名，接收方用發(fā)送方的公開密鑰驗證
B.發(fā)送方用自己的私有密鑰簽名，接收方用自己的私有密鑰驗證
C.發(fā)送方用接收方的公開密鑰簽名，接收方用自己的私有密鑰驗證
D.發(fā)送方用自己的私有密鑰簽名，接收方用發(fā)送方的公開密鑰驗證查看答案
試題參考答案：D
試題3
BLP機密性模型中，安全級的順序一般規(guī)定為：公開＜秘密＜機密＜絕密。兩個范疇集之間的關(guān)系是包含、被包含或無關(guān)。如果一個BLP機密性模型系統(tǒng)訪問類下：
文件E訪問類：（機密：財務處，科技處｝；
文件F訪問類：（機密：人事處，財務處｝；
用戶A訪問類：｛絕密：人事處｝；
用戶B訪問類：（絕密：人事處，財務處，科技處｝。
則以下表述中，正確的是（ ）
A．用戶A不能讀文件F
B．用戶B不能讀文件F
C．用戶A能讀文件E
D．用戶B不能讀文件E查看答案
試題參考答案：A
試題4
入侵防御系統(tǒng)IPS的主要作用是過濾掉有害網(wǎng)絡信息流，阻斷入侵者對目標的攻擊行為。IPS的主要安全功能不包括（ ）。
A．屏蔽指定IP地址
B．屏蔽指定網(wǎng)絡端口
C．網(wǎng)絡物理隔離
D．屏蔽指定域名查看答案
試題參考答案：C
試題5
深度流檢測技術(shù)是一種主要通過判斷網(wǎng)絡流是否異常來進行安全防護的網(wǎng)絡安全技術(shù),深度流檢測系統(tǒng)通常不包括（ ）。
A.流特征提取單元
B.流特征選擇單元
C.分類器
D.響應單元查看答案
試題參考答案：D
試題6
無線傳感器網(wǎng)絡(WSN)是由部署在監(jiān)測區(qū)域內(nèi)大量的廉價微型傳感器節(jié)點組成， 通過無線通信方式形成的一個多跳的自組織網(wǎng)絡系統(tǒng)。以下WSN標準中， 不屬于工業(yè)標準的是（）。
A.ISA100.11a
B.WIA-PA
C.Zigbee
D.WirelessHART查看答案
試題參考答案：C
試題7
Trust is typically interpreted as a subjective belief in the reliability， honesty and security of an entity on which we depend （ ）our welfare .In online environments we depend on a wide spectrun of things , ranging from computer hardware,software and data to people and organizations. A security solution always assumes certain entities function according to specific policies.To trust is precisely to make this sort of assumptions , hence , a trusted entity is the same as an entity that is assumed to function according to policy . A consequence of this is that a trust component of a system must work correctly in order for the security of that system to hold, meaning that when a trusted（ ）fails , then the sytems and applications that depend on it can（ ）be considered secure.An often cited articulation of this principle is:＂ a trusted system or component is one that can break your security policy” ( which happens when the trust system fails ). The same applies to a trusted party such as a service provider ( SP for short )that is , it must operate according to the agreed or assumed policy in order to ensure the expected level of securty and quality of services . A paradoxical conclusion to be drawn from this analysis is that security assurance may decrease when increasing the number of trusted components and parties that a service infrastructure depends on . This is because the security of an infrastructure consisting of many.
Trusted components typically follows the principle of the weakest link , that is ,in many situations the the overall security can only be as strong as the least reliable or least secure of all the trusted components. We cannot avoid using trusted security components,but the fewer the better. This is important to understand when designing the identity management architectures,that is, fewer the trusted parties in an identity management model , stronger the security that can be achieved by it.
The transfer of the social constructs of identity and trust into digital and computational concepts helps in designing and implementing large scale online markets and communities,and also plays an important role in the converging mobile and Internet environments.Identity management (denoted Idm hereafter ) is about recognizing and verifying the correctness of identitied in online environment .Trust management becomes a component of （ ）whenever different parties rely on each other for identity provision and authentication . IdM and Trust management therefore depend on each other in complex ways because the correctness of the identity itself must be trusted for the quality and reliability of the corresponding entity to be trusted.IdM is also an essential concept when defining authorisation policies in personalised services.
Establishing trust always has a cost, so that having complex trust requirement typically leads to high overhead in establishing the required trust. To reduce costs there will be incentives for stakeholders to “cut corners”regarding trust requirements ,which could lead to inadequate security . The challenge is to design IdM systems with relatively simple trust requirements.Cryptographic mechanisms are often a core component of IdM solutions,for example,for entity and data authentication.With cryptography,it is often possible to propagate trust from where it initially exists to where it is needed .The establishment of initial（ ）usually takes place in the physical world,and the subsequent propagation of trust happens online,often in an automated manner.
（71）A.with
B. on
C. of
D. for
（72）A.entity
B.person
C.component
D.thing
（73）A. No longer
B. never
C. always
D.often
（74）A. SP
B. IdM
C.Internet
D.entity
（75）A.trust
B.cost
C.IdM
D. solution查看答案
試題參考答案：D、C、A、B、A
試題8
身份認證是證實客戶的真實身份與其所聲稱的身份是否相符的驗證過程。目前，計算機及網(wǎng)絡系統(tǒng)中常用的身份認證技術(shù)主要有：用戶名/密碼方式、智能卡認證、動態(tài)口令、生物特征認證等。其中不屬于生物特征的是（）。
A.指紋
B.手指靜脈
C.虹膜
D.擊鍵特征查看答案
試題參考答案：D
試題9
惡意軟件是目前移動智能終端上被不法分子利用最多、對用戶造成危害和損失最大的安全成脅類型。數(shù)據(jù)顯示，目前安卓平臺惡意軟件主要有（ ）四種類型。
A.遠程控制木馬、話費吸取類、隱私竊取類和系統(tǒng)破壞類
B.遠程控制木馬、話費吸取類、系統(tǒng)破壞類和硬件資源消耗類
C.遠程控制木馬、話費吸取類、隱私竊取類和惡意推廣
D.遠程控制木馬、話費吸取類、系統(tǒng)破壞類和惡意推廣查看答案
試題參考答案：A
試題10
以下網(wǎng)絡攻擊中，（）屬于被動攻擊
A、拒絕服務攻擊
B、重放
C、假冒
D、流量分析查看答案
試題參考答案：D
掃碼關(guān)注公眾號
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請以權(quán)威部門公布的內(nèi)容為準！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛好者、大學生提供專業(yè)、高質(zhì)量的課程和服務，解決其考試證書、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專業(yè)軟考教研傾力打造，官方教材參編作者和資深講師坐鎮(zhèn)，通過深研歷年考試出題規(guī)律與考試大綱，深挖核心知識與高頻考點，為學員考試保駕護航。面授、直播＆錄播，多種班型靈活學習，滿足不同學員考證需求，降低課程學習難度，使學習效果事半功倍。
相關(guān)內(nèi)容
| 發(fā)表評論 查看完整評論 | |
考試新手指南
學習計劃攻略
精華備考資料
案例論文干貨
章節(jié)模擬試題
免費試聽課程軟考題庫
推薦文章
各省市軟考報名簡章
信管網(wǎng)APP下載
考試信息推送 推薦內(nèi)容