分享到微信
信息安全工程師當天每日一練試題地址：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：m.xiexiliangjiufa.com/class/27/e6_1.html
信息安全工程師每日一練試題（2024/2/21）在線測試：m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6&day=2024/2/21
點擊查看：更多信息安全工程師習題與指導
信息安全工程師每日一練試題內(nèi)容（2024/2/21）
試題1
甲不但懷疑乙發(fā)給他的被人篡改，而且懷疑乙的公鑰也是被人冒充的，為了消除甲的疑慮，甲和乙決定找一個雙方都信任的第三方來簽發(fā)數(shù)字證書，這個第三方為（）
A、國際電信聯(lián)盟電信標準分部（ITU-T）
B、國家安全局（NSA）
C、認證中心（CA）
D、國家標準化組織（ISO）查看答案
試題參考答案：C
試題2
在訪問因特網(wǎng)時,為了防止WEB頁面中惡意代碼對自己計算機的損害,可以采取的防范措施是（ ）。
A.將要訪問的Web站點按其可信度分配到瀏覽器的不同安全區(qū)域
B.利用SSL訪問Web站點
C.在瀏覽器中安裝數(shù)字證書
D.利用IP安全協(xié)議訪問Web站點查看答案
試題參考答案：A
試題3
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’ type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
試題參考答案：A、D、C、B、A
試題4
按照行為和功能特性，特洛伊木馬可以分為遠程控制型木馬、信息竊取型木馬和破壞型木馬等。以下不屬于遠程控制型木馬的是（）。
A、冰河
B.彩虹橋
C.PC Share
D.Trojan-Ransom查看答案
試題參考答案：D
試題5
中間人攻擊就是在通信雙方毫無察覺的情況下，通過攔截正常的網(wǎng)絡通信數(shù)據(jù)，進而對數(shù)據(jù)進行嗅探或篡改。以下屬于中間人攻擊的是（ ）。
A.DNS欺騙
B.社會工程攻擊
C.網(wǎng)絡釣魚
D.旁注攻擊查看答案
試題參考答案：A
試題6
2017年11月,在德國柏林召開的第55次ISO/IEC信息安全分技術委員會(SC27)會議上,我國專家組提出的（ ）算法一致通過成為國際標準。
A.SM2與SM3
B.SM3與SM4
C.SM4與SM9
D.SM9與SM2查看答案
試題參考答案：D
試題7
IPSec屬于（ ）的安全解決方案。
A.網(wǎng)絡層
B.傳輸層
C.應用層
D.物理層查看答案
試題參考答案：A
試題8
針對電子郵件的安全問題，人們利用PGP(Pretty Good Privacy)來保護電子郵件的安全。以下有關PGP的表述，錯誤的是( )。
A．PGP的密鑰管理采用RSA
B．PGP的完整性檢測采用MD5
C．PGP的數(shù)字簽名采用RSA
D．PGP的數(shù)據(jù)加密采用DES查看答案
試題參考答案：D
試題9
面向身份信息的認證應用中，最常用的認證方法是（）
A、基于數(shù)據(jù)庫的認證
B、基于摘要算法認證
C、基于PKI認證
D、基于賬戶名/口令認證查看答案
試題參考答案：D
試題10
電子郵件系統(tǒng)的郵件協(xié)議有發(fā)送協(xié)議SMTP和接收協(xié)議POP3/IMAP4。SMTP發(fā)送協(xié)議中，發(fā)送身份標識的指令是（ ）。
A. SEND
B. HELP
C. HELO
D. SAML查看答案
試題參考答案：C
信管網(wǎng)訂閱號
信管網(wǎng)視頻號
信管網(wǎng)抖音號
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請以權威部門公布的內(nèi)容為準！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛好者、大學生提供專業(yè)、高質(zhì)量的課程和服務，解決其考試證書、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專業(yè)軟考教研傾力打造，教材和資料參編作者和資深講師坐鎮(zhèn)，通過深研歷年考試出題規(guī)律與考試大綱，深挖核心知識與高頻考點，為學員考試保駕護航。面授、直播＆錄播，多種班型靈活學習，滿足不同學員考證需求，降低課程學習難度，使學習效果事半功倍。
相關內(nèi)容
| 發(fā)表評論 查看完整評論 | |
考試新手指南
學習計劃攻略
精華備考資料
案例論文干貨
章節(jié)模擬試題
免費試聽課程
考試信息推送