分享到微信
信息安全工程師當天每日一練試題地址：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：m.xiexiliangjiufa.com/class/27/e6_1.html
信息安全工程師每日一練試題（2023/6/7）在線測試：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6&day=2023/6/7
信息安全工程師每日一練試題內(nèi)容（2023/6/7）
試題1
S/key口令是一種一次性口令生成方案，它可以對抗（ ）。
A.惡意代碼攻擊
B.暴力分析攻擊
C.重放攻擊
D.協(xié)議分析攻擊查看答案
試題參考答案：C
試題2
工業(yè)控制系統(tǒng)是由各種自動化控制組件和實時數(shù)據(jù)采集、監(jiān)測的過程控制組件共同構(gòu)成，工業(yè)控制系統(tǒng)安全面臨的主要威脅不包括（）
A.系統(tǒng)漏洞
B.網(wǎng)絡(luò)攻擊
C.設(shè)備故障
D.病毒破壞查看答案
試題參考答案：C
試題3
Kerberos是一種常用的身份認證協(xié)議,它采用的加密算法是（ ）。
A.Elgamal
B.DES
C.MD5
D.RSA查看答案
試題參考答案：B
試題4
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
試題參考答案：A、D、C、B、A
試題5
SMTP是一種提供可靠有效的電子郵件傳輸?shù)膮f(xié)議，采用客戶服務(wù)器的工作方式，在傳輸層使用TCP協(xié)議進行傳輸。SMTP發(fā)送協(xié)議中，傳送報文文本的指令是（） 。
A.HELO
B.HELP
C.SEND
D.DATA查看答案
試題參考答案：D
試題6
以下關(guān)于網(wǎng)絡(luò)釣魚的說法中，不正確的是（）
A、網(wǎng)絡(luò)釣魚融合了偽裝、欺騙等多種攻擊方式
B、網(wǎng)絡(luò)釣魚與Web服務(wù)沒有關(guān)系
C、典型的網(wǎng)絡(luò)釣魚攻擊都將被攻擊者引誘到一個通過精心設(shè)計的釣魚網(wǎng)站上
D、網(wǎng)絡(luò)釣魚是“社會工程攻擊”是一種形式查看答案
試題參考答案：B
試題7
《計算機信息系統(tǒng)安全保護等級劃分準則》中規(guī)定了計算機系統(tǒng)安全保護能力的五個等級，其中要求計算機信息系統(tǒng)可信計算機滿足訪問監(jiān)控器需求的是（）
A.系統(tǒng)審計保護級
B.安全標記保護級
C.結(jié)構(gòu)化保護級
D.訪問驗證保護級查看答案
試題參考答案：D
試題8
數(shù)字證書是一種由一個可信任的權(quán)威機構(gòu)簽署的信息集合。PKI中的X. 509數(shù)字證書的內(nèi)容不包括（ ）。
A.版本號
B.簽名算法標識
C.證書持有者的公鑰信息
D.加密算法標識查看答案
試題參考答案：D
試題9
由于Internet規(guī)模太大，常把它劃分成許多小的自治系統(tǒng)，通常把自治系統(tǒng)內(nèi)部的路由協(xié)議稱為內(nèi)部網(wǎng)關(guān)協(xié)議，自治系統(tǒng)之間的協(xié)議稱為外部網(wǎng)關(guān)協(xié)議。以下屬于外部網(wǎng)關(guān)協(xié)議的是（）。
A.RIP
B.OSPF
C.BGP
D.UDP查看答案
試題參考答案：C
試題10
下面關(guān)于跨站攻擊描述不正確的是（）
A.跨站腳本攻擊指的是惡意攻擊者向Web頁面里插入惡意的Html代碼
B.跨站腳本攻擊簡稱XSS
C.跨站腳本攻擊也可稱作CSS
D.跨站腳本攻擊是主動攻擊查看答案
試題參考答案：D
信管網(wǎng)訂閱號
信管網(wǎng)視頻號
信管網(wǎng)抖音號
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請以權(quán)威部門公布的內(nèi)容為準！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛好者、大學(xué)生提供專業(yè)、高質(zhì)量的課程和服務(wù)，解決其考試證書、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專業(yè)軟考教研傾力打造，教材和資料參編作者和資深講師坐鎮(zhèn)，通過深研歷年考試出題規(guī)律與考試大綱，深挖核心知識與高頻考點，為學(xué)員考試保駕護航。面授、直播＆錄播，多種班型靈活學(xué)習(xí)，滿足不同學(xué)員考證需求，降低課程學(xué)習(xí)難度，使學(xué)習(xí)效果事半功倍。
相關(guān)內(nèi)容
| 發(fā)表評論 查看完整評論 | |
考試新手指南
學(xué)習(xí)計劃攻略
精華備考資料
案例論文干貨
章節(jié)模擬試題
免費試聽課程
考試信息推送