分享到微信
信息安全工程師當(dāng)天每日一練試題地址：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：m.xiexiliangjiufa.com/class/27/e6_1.html
信息安全工程師每日一練試題（2023/8/24）在線(xiàn)測(cè)試：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6&day=2023/8/24
點(diǎn)擊查看：更多信息安全工程師習(xí)題與指導(dǎo)
信息安全工程師每日一練試題內(nèi)容（2023/8/24）
試題1
（）是一種通過(guò)對(duì)信息進(jìn)行均衡、安全的防護(hù)，提高整個(gè)系統(tǒng)最低安全性能的原則。
A.木桶原則
B.保密原則
C.等級(jí)化原則
D.最小特權(quán)原則查看答案
試題參考答案：A
試題2
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
試題參考答案：A、D、C、B、A
試題3
訪問(wèn)控制是對(duì)信息系統(tǒng)資源進(jìn)行保護(hù)的重要措施，適當(dāng)?shù)脑L問(wèn)控制能夠阻止未經(jīng)授權(quán)的用戶(hù)有意或者無(wú)意地獲取資源。信息系統(tǒng)訪問(wèn)控制的基本要素不包括（ ）。
A、主體
B、客體
C、授權(quán)訪問(wèn)
D、身份認(rèn)證查看答案
試題參考答案：D
試題4
PKI中撤銷(xiāo)證書(shū)是通過(guò)維護(hù)一個(gè)證書(shū)撤銷(xiāo)列表CRL來(lái)實(shí)現(xiàn)的。以下不會(huì)導(dǎo)致證書(shū)被撤銷(xiāo)的是（ ）。
A.密鑰泄漏
B.系統(tǒng)升級(jí)
C.證書(shū)到期
D.從屬變更查看答案
試題參考答案：B
試題5
按照密碼系統(tǒng)對(duì)明文的處理方法,密碼系統(tǒng)可以分為（ ）。
A.對(duì)稱(chēng)密碼系統(tǒng)和公鑰密碼系統(tǒng)
B.對(duì)稱(chēng)密碼系統(tǒng)和非對(duì)稱(chēng)密碼系統(tǒng)
C.數(shù)據(jù)加密系統(tǒng)和數(shù)字簽名系統(tǒng)
D.分組密碼系統(tǒng)和序列密碼系統(tǒng)查看答案
試題參考答案：D
試題6
有線(xiàn)等效保密協(xié)議WEP采用RC4流密碼技術(shù)實(shí)現(xiàn)保密性，標(biāo)準(zhǔn)的64位標(biāo)準(zhǔn)流WEP用的密鑰和初始向量長(zhǎng)度分別是（）
A.32位和32位
B.48位和16位
C.56位和8位
D.40位和24位查看答案
試題參考答案：D
試題7
以下有關(guān)網(wǎng)站攻擊防護(hù)及安全監(jiān)測(cè)技術(shù)的說(shuō)法，錯(cuò)誤的 ( )
A．Web應(yīng)用防火墻針對(duì)80、443端口
B．包過(guò)濾防火墻只能基于IP層過(guò)濾網(wǎng)站惡意包
C．利用操作系統(tǒng)的文件調(diào)用事件來(lái)檢測(cè)網(wǎng)頁(yè)文件的完整性變化，可以發(fā)現(xiàn)網(wǎng)站被非授權(quán)修改
D．網(wǎng)絡(luò)流量清洗可以過(guò)濾掉針對(duì)目標(biāo)網(wǎng)絡(luò)攻擊的惡意網(wǎng)絡(luò)流量查看答案
試題參考答案：C
試題8
注入語(yǔ)句：http：//xxx.xxx.xxx/abc.asp?p=YY and user>0不僅可以判斷服務(wù)器的后臺(tái)數(shù)據(jù)庫(kù)是否為SQL-SERVER，還可以得到（）
A、當(dāng)前連接數(shù)據(jù)庫(kù)的用戶(hù)數(shù)據(jù)
B、當(dāng)前連接數(shù)據(jù)庫(kù)的用戶(hù)名
C、當(dāng)前連接數(shù)據(jù)庫(kù)的用戶(hù)口令
D、當(dāng)前連接的數(shù)據(jù)庫(kù)名查看答案
試題參考答案：B
試題9
在信息系統(tǒng)安全設(shè)計(jì)中，保證“信息及時(shí)且可靠地被訪問(wèn)和使用”是為了達(dá)到保障信息系統(tǒng)（）的目標(biāo)。
A.可用性
B.保密性
C.可控性
D.完整性查看答案
試題參考答案：A
試題10
計(jì)算機(jī)病毒是指一種能夠通過(guò)自身復(fù)制傳染,起破壞作用的計(jì)算機(jī)程序,目前使用的防殺病毒軟件的主要作用是（ ）。
A.檢查計(jì)算機(jī)是否感染病毒,清除已感染的任何病毒
B.杜絕病毒對(duì)計(jì)算機(jī)的侵害
C.查出已感染的任何病毒,清除部分已感染病毒
D.檢查計(jì)算機(jī)是否感染病毒,清除部分已感染病毒查看答案
試題參考答案：D
信管網(wǎng)訂閱號(hào)
信管網(wǎng)視頻號(hào)
信管網(wǎng)抖音號(hào)
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請(qǐng)以權(quán)威部門(mén)公布的內(nèi)容為準(zhǔn)！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛(ài)好者、大學(xué)生提供專(zhuān)業(yè)、高質(zhì)量的課程和服務(wù)，解決其考試證書(shū)、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專(zhuān)業(yè)軟考教研傾力打造，教材和資料參編作者和資深講師坐鎮(zhèn)，通過(guò)深研歷年考試出題規(guī)律與考試大綱，深挖核心知識(shí)與高頻考點(diǎn)，為學(xué)員考試保駕護(hù)航。面授、直播＆錄播，多種班型靈活學(xué)習(xí)，滿(mǎn)足不同學(xué)員考證需求，降低課程學(xué)習(xí)難度，使學(xué)習(xí)效果事半功倍。
相關(guān)內(nèi)容
| 發(fā)表評(píng)論 查看完整評(píng)論 | |
考試新手指南
學(xué)習(xí)計(jì)劃攻略
精華備考資料
案例論文干貨
章節(jié)模擬試題
免費(fèi)試聽(tīng)課程
考試信息推送