信管网每日一练
信息安全工程师 - 每日一练 导航

信息安全工程师每日一练试题(2025/2/26)

2025年02月27日来源:信管网 作者:cnitpm

信息安全工程师当天每日一练试题地址:www.cnitpm.com/exam/ExamDay.aspx?t1=6

往期信息安全工程师每日一练试题汇总:www.cnitpm.com/class/27/e6_1.html

信息安全工程师每日一练试题(2025/2/26)在线测试:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

点击查看:更多信息安全工程师习题与指导

信息安全工程师每日一练试题内容(2025/2/26)

  • 试题1

    PDRR模型是Protection、Detection、Recovery、Response。其中恢复(Recovery)的主要内容不包括(   )
    A.数据备份
    B.数据完整性检测
    C.数据修复
    D.系统恢复

    查看答案

    试题参考答案:B

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

  • 试题2

    以下(  )是对基于异常事件访问控制规则的应用。
    A.下班时间不允许远程访问服务器
    B.重要的服务器只可以本地访问
    C.当用户登录失败多次后,冻结账户
    D.网站的服务能力接近某个阈值时,禁止访问

    查看答案

    试题参考答案:C

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

  • 试题3

    以下关于认证技术的叙述中,错误的是()
    A、指纹识别技术的利用可以分为验证和识别
    B、数字签名是十六进制的字符串
    C、身份认证是用来对信息系统中实体的合法性进行验证的方法
    D、消息认证能够确定接收方收到的消息是否被篡改过

    查看答案

    试题参考答案:B

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

  • 试题4

    Perhaps the most obvious difference between private-key and public-key encryption is that the former assumes complete secrecy of all cry to graphic keys, whereas the latter requires secrecy for only the private key.Although this may seem like a minor distinction ,the ramifications are huge: in the private-key setting the communicating parties must somehow be able to share the (71) key without allowing any third party to learn it, whereas in the public-key setting the (72) key can be sent from one party to the other over a public channel without compromising security.For parties shouting across a room or, more realistically , communicating over a public network like a phone line or then ternet, public-key encryption is the only option.
    Another important distinction is that private-key encryption sch emesuse the (73) key for both encryption and decryption, whereas public key encryption schemes use (74) keys for each operation.That is public-key encryption is inherently as ymmetri C.This asymmetry in the public-key setting means that the roles of sender and receiver are not interchangeable as they are in the private-key setting; a single key-pair allows communication in one direction only.(Bidirectional communication can be achieved in a number of ways; the point is that a single invocation of a public-key encryption scheme forces ad is tinction between one user who acts as a receiver and other users who act as senders.)。In addition, a single instance of a (75) encryption scheme enables multiple senders to communicate privately with a single receiver,in contrast to the private-key case where a secret key shared between two parties enables private communication only between those two parties.
    (1) A.main
    B.same
    C.public
    D.secret
    (2) A.stream
    B.different
    C.public
    D.secret
    (3) A.different
    B.same
    C.public
    D.private
    (4) A.different
    B.same
    C.public
    D.private
    (5) A.private-key
    B.public-key
    C.stream
    D.Hash


    查看答案

    试题参考答案:D、C、B、A、B

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

  • 试题5

    需要被证实的实体是(   ),负责检查确认声称者的实体是(   )
    A.声称者   验证者
    B.验证者   声称者
    C.标识者   鉴别者
    D.鉴别者   标识者

    查看答案

    试题参考答案:A

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

  • 试题6

    关于密码的分类,描述错误的是(  )
    A.密码分为核心密码、普通密码和商用密码
    B.核心密码用于保护国家秘密信息
    C.普通密码不在密码管理部门统一管理的范畴内
    D.公民、法人和其他组织均可依法使用商用密码保护网络与信息安全

    查看答案

    试题参考答案:C

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

  • 试题7

    阿里巴巴大数据安全管理理念的核心是(   )
    A.数据价值最大化
    B.数据生命周期管理
    C.业务闭环优化
    D.法规遵从

    查看答案

    试题参考答案:B

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

  • 试题8

    等保2.0的主要变化不包括(   )
    A.扩大了对象范围
    B.提出了一个中心三重防护
    C.细化划分级别
    D.增加了可信验证控制点

    查看答案

    试题参考答案:B

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

  • 试题9

    源主机A向目标主机B发送FIN数据包,然后查看反馈信息。如果端口返回RESET信息,
    则说明该端口(  )。如果端口没有返回任何信息,则说明该端口(  )。
    A.关闭    开放
    B.开放    关闭
    C.损坏    正常
    D.正常    损坏

    查看答案

    试题参考答案:A

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

  • 试题10

    Apache Web安全增强措施中,为了隐藏Apache软件的版本号以防止潜在的安全威胁,应该修改哪个配置文件并设置哪些参数?
    A.修改httpd.conf,设置ServerSignature On和ServerTokens Prod
    B.修改php.ini,设置expose_php = Off
    C.修改httpd.conf,设置ServerSignature Off和ServerTokens Prod
    D.修改.htaccess,设置ServerSignature Off

    查看答案

    试题参考答案:C

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/2/26

温馨提示:因考试政策、内容不断变化与调整,信管网提供的以上信息仅供参考,如有异议,请考生以权威部门公布的内容为准!

分享至:

信管网 - 信息系统项目管理专业网站

下载APP-在线学习