信息安全工程师每日一练试题（2024/5/12）

2024年05月13日来源：信管网作者:cnitpm

信息安全工程师当天每日一练试题地址：www.cnitpm.com/exam/ExamDay.aspx?t1=6

往期信息安全工程师每日一练试题汇总：www.cnitpm.com/class/27/e6_1.html

信息安全工程师每日一练试题（2024/5/12）在线测试：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12

点击查看：更多信息安全工程师习题与指导

信息安全工程师每日一练试题内容（2024/5/12）

试题1
从网络安全的角度看，以下原则中不属于网络安全防护体系在设计和实现时需要遵循的基本原则的是（）。
A.最小权限原则
B.纵深防御原则
C.安全性与代价平衡原则
D.Kerckhoffs原则
查看答案
试题参考答案：D
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
试题2
特洛伊木马攻击的威胁类型属于（）。
A.旁路控制威胁
B.网络欺骗
C.植入威胁
D.授权侵犯威胁
查看答案
试题参考答案：C
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
试题3
1949年，（）发表了题为《保密系统的通信理论》的文章，为密码技术的研究奠定了理论基础，由此密码学成了一门科学。
A.Shannon
B.Diffie
C.Hellman
D.Shamir
查看答案
试题参考答案：A
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
试题4
在Linux系统中，可用（）工具检查进程使用的文件、TCP／UDP端口、用户等相关信息。
A．ps
B．lsof
C．top
D．pwck
查看答案
试题参考答案：B
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
试题5

以下不属于网络安全控制技术的是（）
A、防火墙技术
B、访问控制
C、入侵检测技术
D、差错控制
查看答案
试题参考答案：D
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
试题6
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’ type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution
查看答案
试题参考答案：A、D、C、B、A
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
试题7
以下关于公钥基础设施（PKI）的说法中，正确的是（）
A. PKI可以解决公钥可信性问题
B. PKI不能解决公钥可信性问题
C. PKI只能有政府来建立
D.PKI不提供数字证书查询服务
查看答案
试题参考答案：A
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
试题8
下列关于数字签名的说法正确的是（）
A.数字签名是不可信的
B.数字签名容易被伪造
C.数字签名容易抵赖
D.数字签名不可改变
查看答案
试题参考答案：D
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
试题9
SSL协议（安全套接层协议）是Netscape公司推出的一种安全通信协议，以下服务中，SSL协议不能提供的是（）。
A.用户和服务器的合法性认证服务
B.加密数据服务以隐藏被传输的数据
C.维护数据的完整性
D.基于UDP应用的安全保护
查看答案
试题参考答案：D
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
试题10

以下关于隧道技术说法不正确的是（）
A、隧道技术可以用来解决TCP/IP协议的某种安全威胁问题
B、隧道技术的本质是用一种协议来传输另外一种协议
C、IPSec协议中不会使用隧道技术
D、虚拟专用网中可以采用隧道技术
查看答案
试题参考答案：C
试题解析与讨论：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12

温馨提示：因考试政策、内容不断变化与调整，信管网提供的以上信息仅供参考，如有异议，请考生以权威部门公布的内容为准！

分享至：