信息安全工程師當(dāng)天每日一練試題地址:m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總:m.xiexiliangjiufa.com/class/27/e6_1.html
信息安全工程師每日一練試題(2020/8/11)在線測試:m.xiexiliangjiufa.com/exam/ExamDay.aspx?t1=6&day=2020/8/11
點(diǎn)擊查看:更多信息安全工程師習(xí)題與指導(dǎo)
信息安全工程師每日一練試題內(nèi)容(2020/8/11)
試題
1:
IPv6是由互聯(lián)網(wǎng)工程任務(wù)組(Internet Engineering Task Force,IETF)設(shè)計的下一代IP協(xié)議,IPv6采用的地址長度是:()
A、 256位
B、 128位
C、 64位
D、 512位
試題解析與討論:
m.xiexiliangjiufa.com/st/2678828745.html試題參考答案:B
試題
2:
程序設(shè)計和編碼的問題引入的風(fēng)險為:()
A."網(wǎng)絡(luò)釣魚"
B."緩沖區(qū)溢出"
C."SYN 攻擊"
D.暴力破解
試題解析與討論:
m.xiexiliangjiufa.com/st/263372055.html試題參考答案:B
試題
3: 以下關(guān)于VPN的敘述中,正確的是( )。
A.VPN通過加密數(shù)據(jù)保證通過公網(wǎng)傳輸?shù)男畔⒓词贡凰私孬@也不會泄露
B.VPN指用戶自己租用線路,和公共網(wǎng)絡(luò)物理上完全隔離的、安全的線路
C.VPN不能同時實(shí)現(xiàn)信息的認(rèn)證和對身份的認(rèn)證
D.VPN通過身份認(rèn)證實(shí)現(xiàn)安全目標(biāo),不具數(shù)據(jù)加密功能
試題解析與討論:
m.xiexiliangjiufa.com/st/3898424562.html試題參考答案:A
試題
4: An IS auditor should recommend the use of library control software to provide reasonable assurance that:
A、program changes have been authorized.
B、only thoroughly tested programs are released.
C、modified programs are automatically moved to production.
D、source and executable code integrity is maintained.
試題解析與討論:
m.xiexiliangjiufa.com/st/2976329600.html試題參考答案:A
試題
5: The use of object-oriented design and development techniques would MOST likely:
A、facilitate the ability to reuse modules.
B、improve system performance.
C、enhance control effectiveness.
D、speed up the system development life cycle.
試題解析與討論:
m.xiexiliangjiufa.com/st/295177699.html試題參考答案:A
試題
6:
以下哪個選項(xiàng)是缺乏適當(dāng)?shù)陌踩刂频谋憩F(xiàn)()
A.威脅
B.脆弱性
C.資產(chǎn)
D.影響
試題解析與討論:
m.xiexiliangjiufa.com/st/26194728.html試題參考答案:B
試題
7: The computer security incident response team (CSIRT) of an organization disseminates detailed descriptions of recent threats. An IS auditor's GREATEST concern should be that the users might:
A、use this information to launch attacks.
B、forward the security alert.
C、implement individual solutions.
D、fail to understand the threat.
試題解析與討論:
m.xiexiliangjiufa.com/st/2982516746.html試題參考答案:A
試題
8:
SSL提供那些協(xié)議上的數(shù)據(jù)安全:()
A、HTTP,F(xiàn)TP和TCP/IP
B、SKIP,SNMP和IP
C、UDP,VPN和SONET
D、PPTP,DMI 和RC4
試題解析與討論:
m.xiexiliangjiufa.com/st/2718927803.html試題參考答案:A
試題
9: Much of the theoretical work in cryptography concerns cryptographic primitives algorithms with basic cryptographic properties - and their relationship to other cryptographic problems. More complicated cryptographic tools are then built from these basic primitives. Complex functionality in an application must be built in using combinations of these algorithms and assorted protocols. Such combinations are called( 1 ) and it is they which users actually encounter. Examples include PGP and its variants, ssh, SSL/TLS, all PKIs, ( 2 ), etc For example, a ( 3 ) is function intended to be easy to compute but hard to invert.
But note that, in a very general sense, for any cryptographic application to be secure (if based on computational feasibility assumptions) one-way functions must exist. However, if one-way functions exist, this implies that ( 4 )≠NP. Since the P versus NP problem is currently unsolved, it is not known if one-way functions really do exist. For instance, if one way functions exist, then secure pseudorandom generators and secure pseudorandom functions exist. Other ( 5 )include the encryption algorithms themselves, one-way permutations, trapdoor permutations, etc.
(1)A. Password base
B. cryptosystems
C. Principles of cryptography
D. Equipment system
(2)A. Certification
B. Digest Summary
C. digital signatures
D. Identification
(3)A. Hash function
B. one-way function
C. Bidirectional function
D. Power function
(4)A. NPC
B. N
C. NP
D. P
(5)A. cryptographic primitives
B. Principles of cryptography
C. cryptosystems
D. Password base
試題解析與討論:
m.xiexiliangjiufa.com/st/2914512560.html試題參考答案:B、C、B、D、A
試題
10:
當(dāng)曾經(jīng)用于存放機(jī)密資料的PC在公開市場出售時()
A.對磁盤進(jìn)行消磁
B.對磁盤低級格式化
C.刪除數(shù)據(jù)
D.對磁盤重整
試題解析與討論:
m.xiexiliangjiufa.com/st/2608019128.html試題參考答案:A