信息安全工程師當(dāng)天每日一練試題地址:m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總:m.xiexiliangjiufa.com/class/27/e6_1.html
信息安全工程師每日一練試題(2023/7/9)在線測(cè)試:m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6&day=2023/7/9
點(diǎn)擊查看:更多信息安全工程師習(xí)題與指導(dǎo)
信息安全工程師每日一練試題內(nèi)容(2023/7/9)
試題1
基于網(wǎng)絡(luò)的入侵檢測(cè)系統(tǒng)(NIDS)通過(guò)偵聽(tīng)網(wǎng)絡(luò)系統(tǒng),捕獲網(wǎng)絡(luò)數(shù)據(jù)包,并依據(jù)網(wǎng)絡(luò)包是否包含攻擊特征,或者網(wǎng)絡(luò)通信流是否異常來(lái)識(shí)別入侵行為。以下不適合采用NIDS檢測(cè)的入侵行為是( )。查看答案
試題參考答案:C
試題2
在我國(guó),依據(jù)《中華人民共和國(guó)標(biāo)準(zhǔn)化法》可以將標(biāo)準(zhǔn)劃分為:國(guó)家標(biāo)準(zhǔn)、行業(yè) 標(biāo)準(zhǔn)、地方標(biāo)準(zhǔn)和企業(yè)標(biāo)準(zhǔn)4個(gè)層次?!缎畔踩夹g(shù)信息系統(tǒng)安全等級(jí)保護(hù)基本要求》 (GB/T 22239-2008)屬于( )。查看答案
試題參考答案:A
試題3
PKI是一種標(biāo)準(zhǔn)的公鑰密碼的密鑰管理平臺(tái),數(shù)字證書(shū)是PKI的基本組成部分。在PKI中,X.509數(shù)字證書(shū)的內(nèi)容不包括()。查看答案
試題參考答案:A
試題4
FTP是一個(gè)交互會(huì)話的系統(tǒng),在進(jìn)行文件傳輸時(shí),F(xiàn)TP的客戶和服務(wù)器之間需要建立兩個(gè)TCP連接,分別是()查看答案
試題參考答案:B
試題5
Web服務(wù)器也稱為網(wǎng)站服務(wù)器, 可以向?yàn)g覽器等Web客戶端提供文檔,也可以放置網(wǎng)站文件和數(shù)據(jù)文件。目前最主流的三個(gè)Web服務(wù)器是Apache、Nginx、IIS。Web服務(wù)器都會(huì)受到HTTP協(xié)議本身安全問(wèn)題的困擾,這種類型的信息系統(tǒng)安全漏洞屬于() 。查看答案
試題參考答案:A
試題6
在非安全的通信環(huán)境中,為了保證消息來(lái)源的可靠性,通常采用的安全防護(hù)技術(shù)是()查看答案
試題參考答案:C
試題7
There are different ways to perform IP based DoS Attacks. The most common IP based DoS attack is that an attacker sends an extensive amount of connection establishment (1)(e.g. TCP SYN requests) to establish hanging connections with the controller or a DPS. Such a way, the attacker can consume the network resources which should be available for legitimate users. In other (2), the attacker inserts a large amount of (3)packets to the data plane by spoofing all or part of the header fields with random values. These incoming packets will trigger table-misses and send lots of packet-in flow request messages to the network controller to saturate the controller resources. In some cases, an (4)who gains access to DPS can artificially generate lots of random packet-in flow request messages to saturate the control channel and the controller resources. Moreover, the lack of diversity among DPSs fuels fuels the fast propagation of such attacks.
Legacy mobile backhaul devices are inherently protected against the propagation of attacks due to complex and vendor specific equipment. Moreover, legacy backhaul devices do not require frequent communication with core control devices in a manner similar to DPSs communicating with the centralized controller. These features minimize both the impact and propagation of DoS attacks. Moreover, the legacy backhaul devices are controlled as a joint effort of multiple network element. For instance, a single Long Term Evilution(LTE)eNodeB is connected up to 32 MMEs. Therefore, DoS/DDoS attack on a single core element will not terminate the entire operation of a backhaul device(5)the net work.
查看答案
試題參考答案:C、B、C、D、A
試題8
設(shè)在RSA的公鑰密碼體制中,用于為(e,n)=(7,55),則私鑰d=()。查看答案
試題參考答案:C
試題9
在信息系統(tǒng)安全設(shè)計(jì)中,保證“信息及時(shí)且可靠地被訪問(wèn)和使用”是為了達(dá)到保障信息系統(tǒng)()的目標(biāo)。查看答案
試題參考答案:A
試題10
密碼分析學(xué)是研究密碼破譯的科學(xué),在密碼分析過(guò)程中,破譯密文的關(guān)鍵是()
A、截獲密文
B、截獲密文并獲得密鑰
C、截獲密文,了解加密算法和解密算法
D、截獲密文,獲得密鑰并了解解密算法
查看答案
試題參考答案:D
信管網(wǎng)訂閱號(hào)
信管網(wǎng)視頻號(hào)
信管網(wǎng)抖音號(hào)
溫馨提示:因考試政策、內(nèi)容不斷變化與調(diào)整,信管網(wǎng)網(wǎng)站提供的以上信息僅供參考,如有異議,請(qǐng)以權(quán)威部門公布的內(nèi)容為準(zhǔn)!
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛(ài)好者、大學(xué)生提供專業(yè)、高質(zhì)量的課程和服務(wù),解決其考試證書(shū)、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專業(yè)軟考教研傾力打造,教材和資料參編作者和資深講師坐鎮(zhèn),通過(guò)深研歷年考試出題規(guī)律與考試大綱,深挖核心知識(shí)與高頻考點(diǎn),為學(xué)員考試保駕護(hù)航。面授、直播&錄播,多種班型靈活學(xué)習(xí),滿足不同學(xué)員考證需求,降低課程學(xué)習(xí)難度,使學(xué)習(xí)效果事半功倍。
發(fā)表評(píng)論 查看完整評(píng)論 | |