信息安全工程师每日一练试题（2023/7/8）

2023年07月09日来源：信管网作者:cnitpm

信息安全工程师当天每日一练试题地址：www.cnitpm.com/exam/ExamDay.aspx?t1=6

往期信息安全工程师每日一练试题汇总：www.cnitpm.com/class/27/e6_1.html

信息安全工程师每日一练试题（2023/7/8）在线测试：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2023/7/8

点击查看：更多信息安全工程师习题与指导

信息安全工程师每日一练试题内容（2023/7/8）

试题1
1949年，（）发表了题为《保密系统的通信理论》的文章，为密码技术的研究奠定了理论基础，由此密码学成了一门科学。
A.Shannon
B.Diffie
C.Hellman
D.Shamir
查看答案
试题参考答案：A
试题解析与讨论：www.cnitpm.com/st/3268914698.html
试题2
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution
查看答案
试题参考答案：A、D、C、B、A
试题解析与讨论：www.cnitpm.com/st/4115223167.html
试题3
人为的安全威胁包括主动攻击和被动攻击,以下属于被动攻击的是（）。
A.流量分析
B.后门
C.拒绝服务攻击
D.特洛伊木马
查看答案
试题参考答案：A
试题解析与讨论：www.cnitpm.com/st/3895218880.html
试题4
文件型病毒不能感染的文件类型是（）。
A.SYS型
B.EXE类型
C.COM型
D.HTML型
查看答案
试题参考答案：D
试题解析与讨论：www.cnitpm.com/st/389728017.html
试题5
安全电子交易协议SET是由VISA和MasterCard两大信用卡组织联合开发的电子商务安全协议。以下关于SET的叙述中，不正确的是（）。
A. SET协议中定义了参与者之间的消息协议
B.SET协议能够解决多方认证问题
C.SET协议规定交易双方通过问答机制获取对方的公开密钥
D.在SET中使用的密码技术包括对称加密、数字签名、数字信封技术等
查看答案
试题参考答案：C
试题解析与讨论：www.cnitpm.com/st/411403607.html
试题6
僵尸网络是指采用一种或多种传播手段，将大量主机感染bot程序，从而在控制者和被感染主机之间形成的一个可以一对多控制的网络。以下不属于低尸网络传播过程常见方式的是（）
A.主动攻击漏洞
B.恶意网站脚本
C.字典攻击
D.邮件病毒
查看答案
试题参考答案：C
试题解析与讨论：www.cnitpm.com/st/501914322.html
试题7
蠕虫是一种可以独立运行、并且能将自身的一个包含了所有功能的版本传播到其他计算机上的程序。网络蠕虫可以分为：漏洞利用类蠕虫、口令破解类螨虫、电子邮件类蠕虫、P2P类蠕虫等。以下不属于漏洞利用类蠕虫的是（）
A.CodeRed
B.Slammer
C.MSBlaster
D.IRC-worm
查看答案
试题参考答案：D
试题解析与讨论：www.cnitpm.com/st/5021119931.html
试题8

（1）is the science of hiding information. Whereas the goal of cryptography is to make data unreadable by a third party. the goal of steganography is to hide the data from a third party. In this article, I will discuss what steganography is, what purposes it serves, and will provide an example using available software.
There are a large number of steganographic （2）that most of us are familiar with (especially if you watch a lot of spy movies), ranging from invisible ink and microdots to secreting a hidden message in the second letter of each word of a large body of text and spread spectrum radio communication. With computers and networks, there are many other ways of hiding informations, such as:
Covert channels (c,g, Loki and some distributed denial-of-service tools use the Internet Control （3）Protocol, or ICMP, as the communication channel between the “bad guy”and a compromicyed system)
Hidden text within Web pages
Hiding files in “plain sight”(c,g. what better place to “hide”a file than with an important sounding name in the c:\winnt system32 directory)
Null ciphers(c,g, using the first letter of each word to form a hidden message in an otherwise innocuous text)
steganography today, however, is significantly more （4）than the example about suggest, allowing a user to hide large amounts of information within image and audio. These forms of steganography often are used in conjunction with cryptography so the information is double protected; first it is encrypted and then hidden so that an advertisement first. find the information ( an often difficult task in and of itself) and the decrypted it.
The simplest approach to hiding data within an image file is called （5）signature insertion. In this method, we can take the binary representation of the hidden data and the bit of each byte within the covert image. If we are using 24-bit color the amount and will be minimum and indiscriminate to the human eye.
（1）A、Cryptography
B、Geography
C、Stenography
D、Steganography
（2）A、methods
B、software
C、tools
D、services
（3）A、Member
B、Management
C、Message
D、Mail
（4）A、powerful
B、sophistication
C、advanced
D、easy
（5）A、least
B、most
C、much
D、less
查看答案
试题参考答案：D、A、C、B、A
试题解析与讨论：www.cnitpm.com/st/2851420507.html
试题9

按照密码系统对明文的处理方法，密码系统可以分为（）
A、置换密码系统和易位密码
B、密码学系统和密码分析学系统
C、对称密码系统和非对称密码系统
D、分组密码系统和序列密码系统
查看答案
试题参考答案：D
试题解析与讨论：www.cnitpm.com/st/2845825599.html
试题10
无线传感器网络容易受到各种恶意攻击，以下关于其防御手段说法错误的是（）。
A.采用干扰区内节点切换频率的方式抵御干扰
B.通过向独立多路径发送验证数据来发现异常节点
C.利用中心节点监视网络中其它所有节点来发现恶意节点
D.利用安全并具有弹性的时间同步协议对抗外部攻击和被俘获节点的影响
查看答案
试题参考答案：C
试题解析与讨论：www.cnitpm.com/st/3274326177.html

温馨提示：因考试政策、内容不断变化与调整，信管网提供的以上信息仅供参考，如有异议，请考生以权威部门公布的内容为准！

分享至：