分享到微信
信息安全工程師當(dāng)天每日一練試題地址：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：m.xiexiliangjiufa.com/class/27/e6_1.html
信息安全工程師每日一練試題（2022/11/5）在線測(cè)試：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6&day=2022/11/5
點(diǎn)擊查看：更多信息安全工程師習(xí)題與指導(dǎo)
信息安全工程師每日一練試題內(nèi)容（2022/11/5）
試題1
以下關(guān)于TCP協(xié)議的描述,錯(cuò)誤的是（ ）。
A.TCP是Internet傳輸層的協(xié)議,可以為應(yīng)用層的不同協(xié)議提供服務(wù)
B.TCP是面向連接的協(xié)議,提供可靠、全雙工的、面向字節(jié)流的端到端的服務(wù)
C.TCP使用二次握手來(lái)建立連接,具有很好的可靠性
D.TCP每發(fā)送一個(gè)報(bào)文段,就對(duì)這個(gè)報(bào)文段設(shè)置一次計(jì)時(shí)器查看答案
試題參考答案：C
試題2
SM4算法是國(guó)家密碼管理局于2012年3月21日發(fā)布的一種分組密碼算法，在我國(guó)商用密碼體系中，SM4主要用于數(shù)據(jù)加密。SM4算法的分組長(zhǎng)度和密鑰長(zhǎng)度分別為（）.
A.128位和64位
B.128位和128位
C.256位和128位
D.256位和256位查看答案
試題參考答案：B
試題3
注入語(yǔ)句：http：//xxx.xxx.xxx/abc.asp?p=YY and user>0不僅可以判斷服務(wù)器的后臺(tái)數(shù)據(jù)庫(kù)是否為SQL-SERVER，還可以得到（）
A、當(dāng)前連接數(shù)據(jù)庫(kù)的用戶(hù)數(shù)據(jù)
B、當(dāng)前連接數(shù)據(jù)庫(kù)的用戶(hù)名
C、當(dāng)前連接數(shù)據(jù)庫(kù)的用戶(hù)口令
D、當(dāng)前連接的數(shù)據(jù)庫(kù)名查看答案
試題參考答案：B
試題4
一個(gè)密碼系統(tǒng)至少由明文、密文、加密算法、解密算法和密鑰五個(gè)部分組成，而其安全性是由（）決定的。
A、加密算法
B.解密算法
C.加解密算法
D.密鑰查看答案
試題參考答案：D
試題5
IP地址欺騙的發(fā)生過(guò)程，下列順序正確的是（）。①確定要攻擊的主機(jī)A；②發(fā)現(xiàn)和他有信任關(guān)系的主機(jī)B；③猜測(cè)序列號(hào)；④成功連接，留下后面；⑤將B利用某種方法攻擊癱瘓。
A.①②⑤③④
B.①②③④⑤
C.①②④③⑤
D.②①⑤③④查看答案
試題參考答案：A
試題6
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
試題參考答案：A、D、C、B、A
試題7
兩個(gè)密鑰三重DES加密：C=CK1[DK2[EK1[P]]],K1≠K2，其中有效的密鑰為（）
A、56
B、128
C、168
D、112查看答案
試題參考答案：D
試題8
從安全屬性對(duì)各種網(wǎng)絡(luò)攻擊進(jìn)行分類(lèi)，阻斷攻擊是針對(duì)（）的攻擊
A.機(jī)密性
B.可用性
C.完整性
D.真實(shí)性查看答案
試題參考答案：B
試題9
以下關(guān)于數(shù)字證書(shū)的敘述中，錯(cuò)誤的是（）
A、證書(shū)通常由CA安全認(rèn)證中心發(fā)放
B、證書(shū)攜帶持有者的公開(kāi)密鑰
C、證書(shū)的有效性可以通過(guò)驗(yàn)證持有者的簽名
D、證書(shū)通常攜帶CA的公開(kāi)密鑰查看答案
試題參考答案：D
試題10
操作系統(tǒng)的安全機(jī)制是指在操作系統(tǒng)中利用某種技術(shù)、某些軟件來(lái)實(shí)施一個(gè)或多個(gè)安全服務(wù)的過(guò)程。操作系統(tǒng)的安全機(jī)制不包括（）。
A.標(biāo)識(shí)與鑒別機(jī)制
B.訪問(wèn)控制機(jī)制
C.密鑰管理機(jī)制
D.安全審計(jì)機(jī)制查看答案
試題參考答案：C
掃碼關(guān)注公眾號(hào)
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請(qǐng)以權(quán)威部門(mén)公布的內(nèi)容為準(zhǔn)！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛(ài)好者、大學(xué)生提供專(zhuān)業(yè)、高質(zhì)量的課程和服務(wù)，解決其考試證書(shū)、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專(zhuān)業(yè)軟考教研傾力打造，官方教材參編作者和資深講師坐鎮(zhèn)，通過(guò)深研歷年考試出題規(guī)律與考試大綱，深挖核心知識(shí)與高頻考點(diǎn)，為學(xué)員考試保駕護(hù)航。面授、直播＆錄播，多種班型靈活學(xué)習(xí)，滿足不同學(xué)員考證需求，降低課程學(xué)習(xí)難度，使學(xué)習(xí)效果事半功倍。
相關(guān)內(nèi)容
| 發(fā)表評(píng)論 查看完整評(píng)論 | |
考試新手指南
學(xué)習(xí)計(jì)劃攻略
精華備考資料
案例論文干貨
章節(jié)模擬試題
免費(fèi)試聽(tīng)課程
考試信息推送