信管网每日一练
信息安全工程师 - 每日一练 导航

信息安全工程师每日一练试题(2025/11/20)

2025年11月21日来源:信管网 作者:cnitpm

信息安全工程师当天每日一练试题地址:www.cnitpm.com/exam/ExamDay.aspx?t1=6

往期信息安全工程师每日一练试题汇总:www.cnitpm.com/class/27/e6_1.html

信息安全工程师每日一练试题(2025/11/20)在线测试:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

点击查看:更多信息安全工程师习题与指导

信息安全工程师每日一练试题内容(2025/11/20)

  • 试题1

    (1)is the science of hiding information. Whereas the goal of cryptography is to make data unreadable by a third party. the goal of steganography is to hide the data from a third party. In this article, I will discuss what steganography is, what purposes it serves, and will provide an example using available software.
    There are a large number of steganographic (2)that most of us are familiar with (especially if you watch a lot of spy movies), ranging from invisible ink and microdots to secreting a hidden message in the second letter of each word of a large body of text and spread spectrum radio communication. With computers and networks, there are many other ways of hiding informations, such as:
    Covert channels (c,g, Loki and some distributed denial-of-service tools use the Internet Control (3)Protocol, or ICMP, as the communication channel between the “bad guy”and a compromicyed system)
    Hidden text within Web pages
    Hiding files in “plain sight”(c,g. what better place to “hide”a file than with an important sounding name in the c:\winnt system32 directory)
    Null ciphers(c,g, using the first letter of each word to form a hidden message in an otherwise innocuous text)
    steganography today, however, is significantly more (4)than the example about suggest, allowing a user to hide large amounts of information within image and audio. These forms of steganography often are used in conjunction with cryptography so the information is double protected; first it is encrypted and then hidden so that an advertisement first. find the information ( an often difficult task in and of itself) and the decrypted it.
    The simplest approach to hiding data within an image file is called (5)signature insertion. In this method, we can take the binary representation of the hidden data and the bit of each byte within the covert image. If we are using 24-bit color the amount and will be minimum and indiscriminate to the human eye.
    (1)A、Cryptography
    B、Geography
    C、Stenography
    D、Steganography
    (2)A、methods
    B、software
    C、tools
    D、services
    (3)A、Member
    B、Management
    C、Message
    D、Mail
    (4)A、powerful
    B、sophistication
    C、advanced
    D、easy
    (5)A、least
    B、most
    C、much
    D、less

    查看答案

    试题参考答案:D、A、C、B、A

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

  • 试题2

    (   )攻击是利用Web脚本程序的编程漏洞,类型的漏洞,把SQL命令插入Web表单的输入域或页面的请求查找字符串,欺骗服务器执行恶意的SQL命令。
    A.社交工程
    B.SQL注入
    C.代理技术
    D.漏洞扫描

    查看答案

    试题参考答案:B

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

  • 试题3

    “多态性发生器”在病毒编译中的主要作用是什么?
    A.减小病毒体积
    B.增加病毒传播速度
    C.使病毒代码每次生成时都发生变化,但保持原有功能
    D.提升病毒的隐蔽性,使其更难被杀毒软件发现

    查看答案

    试题参考答案:C

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

  • 试题4

    以下关于IPSec协议的叙述中,正确的是(  )。
    A.IPSec协议是IP协议安全问题的一种解决方案
    B.IPSec协议不提供机密性保护机制
    C.IPSec协议不提供认证功能
    D.IPSec协议不提供完整性验证机制

    查看答案

    试题参考答案:A

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

  • 试题5

    身份识别在信息安全领域有着广泛的应用,通过识别用户的生理特征来认证用户的身份是安全性很高的身份认证方法。如果把人体特征用于身份识别,则它应该具有不可复制的特点,必须具有( )
    A.唯一性和保密性
    B.唯一性和稳定性
    C.保密性和可识别性
    D.稳定性和可识别性

    查看答案

    试题参考答案:B

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

  • 试题6

    腾讯云提供的(   )服务可以有效应对DDoS攻击。
    A.云防火墙
    B.腾讯云Web应用防火墙
    C.DDoS防护(Anti-DDoS)
    D.漏洞扫描服务

    查看答案

    试题参考答案:C

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

  • 试题7

    通过假冒可信方提供网上服务,以欺骗手段获取敏感个人信息的攻击方式,被称为(  )。
    A.网络钓鱼
    B.拒绝服务
    C.网络窃听
    D.会话劫持

    查看答案

    试题参考答案:A

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

  • 试题8

    重放攻击是指攻击者发送一个目的主机已接收过的包,来达到欺骗系统的目的。下列技术中,不能抵御重放攻击的是( ).
    A.序号
    B.明文填充
    C.时间戳
    D.Nonce

    查看答案

    试题参考答案:B

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

  • 试题9

    攻击者常用来隐藏真实IP地址的方法不包括(  )
    A.假冒用户账号
    B.免费代理网关
    C.收集IP地址
    D.利用被侵入的主机作为跳板

    查看答案

    试题参考答案:C

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

  • 试题10

    在DES算法中,需要进行16轮加密,每一轮的子密钥长度为( )
    A、16
    B、32
    C、48
    D、64

    查看答案

    试题参考答案:C

    试题解析与讨论:www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2025/11/20

温馨提示:因考试政策、内容不断变化与调整,信管网提供的以上信息仅供参考,如有异议,请考生以权威部门公布的内容为准!

分享至:

信管网 - 信息系统项目管理专业网站

下载APP-在线学习