信息安全工程师每日一练试题（2026/8/18）

2026年08月19日来源：信管网作者:cnitpm

信息安全工程师当天每日一练试题地址：www.cnitpm.com/exam/ExamDay.aspx?t1=6

往期信息安全工程师每日一练试题汇总：www.cnitpm.com/class/27/e6_1.html

信息安全工程师每日一练试题（2026/8/18）在线测试：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18

点击查看：更多信息安全工程师习题与指导

信息安全工程师每日一练试题内容（2026/8/18）

试题1
虚拟专用网VPN是一种新型的网络安全传输技术，为数据传输和网络服务提供安全通道。VPN架构采用的多种安全机制中，不包括（）
A.隧道技术
查看答案
试题参考答案：B
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18
试题2
网络安全等级保护中（）要求每年测评一次。
A．强制保护级
查看答案
试题参考答案：C
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18
试题3
4A系统的技术特点是（）
A．集成了访问控制机制和功能，提供多种访问控制服务
查看答案
试题参考答案：A
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18
试题4
CVSS（通用漏洞计分系统）的分数计算依据不包括以下哪一项？
A．基本度量计分
查看答案
试题参考答案：D
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18
试题5
关于密钥交换协议的描述不正确的是（）
A．它的主要优点是它的完整性
查看答案
试题参考答案：A
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18
试题6
有经验的黑客在实施攻击活动时的首要步骤是（）
A．隐蔽攻击行为。
查看答案
试题参考答案：C
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18
试题7
数字水印是通过数字信号处理的方法，在数字化的多媒体数据中，嵌入隐蔽的水印标记。其应用领域不包括( )
A.版权保护
查看答案
试题参考答案：D
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18
试题8
思科Catalyst交换机的（）服务如果不当处理TCP Socket，可能会被远程攻击者利用来导致拒绝服务攻击。
A．FTP服务
查看答案
试题参考答案：C
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18
试题9
Symmetric-key cryptosystems use the( ) key for encryption and decryption of a message,though a message or group of messages may have a different key than others. A significant disadvantage of symmetric ciphers is the key management necessary to use them securely.Each distinct pair of communicating parties must, ideally, share a different key, and perhaps each ciphertext exchanged as well. The number of keys required increases as the square of the number of network members,which very quickly requires complex key management schemes to keep them all straight and secret. The difficulty of securely establishing a secret( )between two communicating parties, when a secure channel doesn't already exist between them, also presents a chicken-and-egg problem which is a considerable practical obstacle for cryptography users in the real world.
Whitfield Difñie and Martin Hellman, authors of the first paper on public-key cryptography.
In a groundbreaking 1976 paper, Whitfield Diffie and Martin Hellman proposed the notion of public-key (also, more generally, called asymmetric key) cryptography in which two different but mathematically related keys are used-a public key and a private key. A public key system is so constructed that calculation of one key (the private key) is computationally infeasible( )the other (the public key), even though they are necessarily related. Instead, both keys are generated secretly, as an interrelated pair. The historian David Kahn described public-key cryptography as “the most revolutionary new concept in the field since poly-alphabetic substitution emerged in the Renaissance”.
In public-key cryptosystems,the( )key may be freely distributed,while its paired private key must remain secret. The public key is typically used for encryption, while the private or secret key is used for decryption. Diffie and Hellman showed that public-key cryptography was possible by presenting the Diffie-Hellman key exchange protocol.
In 1978, Ronald Rivest, Adi Shamir, and Len Adleman invented( ),another public-key system.
In 1997, it finally became publicly known that asymmetric key cryptography had been invented by James H. Ellis at GCHQ,a British intelligence organization, and that, in the early 1970s,both the Diffie-Hellman and RSA algorithms had been previously developed(by Malcolm J. Williamson and Clifford Cocks, respectively).
(1) A. different
查看答案
试题参考答案：B、D、A、A、C
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18
试题10
网络审计数据涉及系统整体的安全性和用户隐私性，以下安全技术措施不属于保护审计数据安全的是( )。
A．系统用户分权管理
查看答案
试题参考答案：D
完整试题与解析：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2026/8/18

温馨提示：因考试政策、内容不断变化与调整，信管网提供的以上信息仅供参考，如有异议，请考生以权威部门公布的内容为准！

分享至：

信管网 - 信息系统项目管理专业网站

下载APP-在线学习

立即下载学习