分享到微信
信息安全工程師當(dāng)天每日一練試題地址：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：m.xiexiliangjiufa.com/class/27/e6_1.html
信息安全工程師每日一練試題（2023/3/3）在線測試：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6&day=2023/3/3
信息安全工程師每日一練試題內(nèi)容（2023/3/3）
試題1
計算機取證是將計算機調(diào)查和分析技術(shù)應(yīng)用于對潛在的、有法律效應(yīng)的確定和提取。以下關(guān)于計算機取證的描述中，錯誤的是（）
A、計算機取證包括對以磁介質(zhì)編碼信息方式存儲的計算機證據(jù)的提取和歸檔
B、計算機取證圍繞電子證據(jù)進行，電子證據(jù)具有高科技性等特點
C、計算機取證包括保護目標計算機系統(tǒng)，確定收集和保存電子證據(jù)，必須在開計算機的狀態(tài)下進行
D、計算機取證是一門在犯罪進行過程中或之后收集證據(jù)查看答案
試題參考答案：C
試題2
文件型病毒不能感染的文件類型是（ ）。
A.SYS型
B.EXE類型
C.COM型
D.HTML型查看答案
試題參考答案：D
試題3
工業(yè)控制系統(tǒng)是由各種自動化控制組件和實時數(shù)據(jù)采集、監(jiān)測的過程控制組件共同構(gòu)成，工業(yè)控制系統(tǒng)安全面臨的主要威脅不包括（）
A.系統(tǒng)漏洞
B.網(wǎng)絡(luò)攻擊
C.設(shè)備故障
D.病毒破壞查看答案
試題參考答案：C
試題4
惡意代碼是指為達到惡意目的而專門設(shè)計的程序或者代碼。常見的惡意代碼類型有：特洛伊木馬、蠕蟲、病毒、后門、Rootkit僵尸程序、廣告軟件。以下惡意代碼中，屬于宏病毒的是（）
A.Trojan.Bank
B.Macro.Melissa
C.Worm.Blaster.g
D.Trojan.huigezi.a查看答案
試題參考答案：B
試題5
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
試題參考答案：A、D、C、B、A
試題6
國產(chǎn)密碼算法是指由國家密碼研究相關(guān)機構(gòu)自主研發(fā)，具有相關(guān)知識產(chǎn)權(quán)的商用密碼算法。以下國產(chǎn)密碼算法中，屬于分組密碼算法的是 ( )
A．SM2
B．SM3
C．SM4
D．SM9查看答案
試題參考答案：C
試題7
安全滲透測試通過模擬攻擊者對測評對象進行安全攻擊，以驗證安全防護機制的有效性。其中需要提供部分測試對象信息，測試團隊根據(jù)所獲取的信息，模擬不同級別的威脅者進行滲透測試，這屬于（ ）。
A．黑盒測試
B．白盒測試
C．灰盒測試
D．盲盒測試查看答案
試題參考答案：C
試題8
電子郵件是傳播惡意代碼的重要途徑，為了防止電子郵件中的惡意代碼的攻擊，用（）方式閱讀電子郵件
A、網(wǎng)頁
B、純文本
C、程序
D、會話查看答案
試題參考答案：B
試題9
（）是一種通過對信息進行均衡、安全的防護，提高整個系統(tǒng)最低安全性能的原則。
A.木桶原則
B.保密原則
C.等級化原則
D.最小特權(quán)原則查看答案
試題參考答案：A
試題10
以下關(guān)于網(wǎng)絡(luò)流量監(jiān)控的敘述中，不正確的是（）
A、流量檢測中所檢測的流量通常采集自主機節(jié)點、服務(wù)器、路由器接口和路徑等
B、數(shù)據(jù)采集探針是專門用于獲取網(wǎng)絡(luò)鏈路流量的硬件設(shè)備
C、流量監(jiān)控能夠有效實現(xiàn)對敏感數(shù)據(jù)的過濾
D、網(wǎng)絡(luò)流量監(jiān)控分析的基礎(chǔ)是協(xié)議行為解析技術(shù)查看答案
試題參考答案：C
信管網(wǎng)訂閱號
信管網(wǎng)視頻號
信管網(wǎng)抖音號
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請以權(quán)威部門公布的內(nèi)容為準！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛好者、大學(xué)生提供專業(yè)、高質(zhì)量的課程和服務(wù)，解決其考試證書、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專業(yè)軟考教研傾力打造，官方教材參編作者和資深講師坐鎮(zhèn)，通過深研歷年考試出題規(guī)律與考試大綱，深挖核心知識與高頻考點，為學(xué)員考試保駕護航。面授、直播＆錄播，多種班型靈活學(xué)習(xí)，滿足不同學(xué)員考證需求，降低課程學(xué)習(xí)難度，使學(xué)習(xí)效果事半功倍。
相關(guān)內(nèi)容
| 發(fā)表評論 查看完整評論 | |
考試新手指南
學(xué)習(xí)計劃攻略
精華備考資料
案例論文干貨
章節(jié)模擬試題
免費試聽課程
考試信息推送