System and Network Security
Covers network security concepts including SSL/TLS protocols, firewalls, encryption methods, security policies, and security design principles.
Questions
Which of the following is excellent for exchanging keys and associating an identity with a public encryption key?
- Certificate scheme
- Interception
- Pretty good privacy
- DEK-info
- Message integrity check
Which of the following provides all alerts as defined by alert protocol of SSL except for no certificate, and also has some new alerts?
- Secure electronic transaction
- Transport layer security
- Interception
- Realism
- Record protocol
Under which of the following characteristics should a security policy grow and adapt well?
- Durability
- Realism
- Complete
- Correct
- Understandable
Which of the following protocols is used by SSL for reporting errors and abnormal conditions?
- Record protocol
- Change cipherspec protocol
- Alert protocol
- Interception
- Continuing attentions
Which of the following uses hierarchically validated certificates, usually represented in X.509 format for key exchange?
- Digital signature
- DEK-info
- Record protocol
- Secure multipurpose internet mail extension
- Key-info
Which of the following fields contains the message encryption key, encrypted under shared encryption key?
- DEK-info
- Key-info
- Digital signature
- Certificate scheme
- Interception
In which of the following characteristics of security policy should the policy either apply to or explicitly exclude all possible situations?
- Coverage
- Realism
- Understandable
- Complete
- Correct
Which of the following firewalls follows the sequence of packets and their conditions from one to another to foil such an attack?
- Packet filtering gateway
- Personal firewall
- Stateful inspection firewall
- Certificate scheme
- Risk analysis
Which of the following security design issues act(s) mapping control(s) to the vulnerabilities identified in the policy and requirements?
- Requirements
- Timetable
- Risk analysis
- Recommended controls
- Realism
Which of the following fields tells what privacy enhancement services have been applied?
- Digital signature
- Certificate scheme
- DEK-info
- Sender authenticity
- Proc-type
Which of the following is a firewall that simulates the proper effects of an application so that the application receives only requests to act properly?
- Packet filtering gateway
- Statefull inspection firewall
- Bastion host
- Interception
- DEK-info
In which of the following characteristics of security policy should the policy be succinct, clear and direct?
- Realism
- Complete
- Efficient
- Usefulness
- Requirement
Which of the following is an open encryption and security specification designed to protect credit card transactions on the internet?
- Message authentication code
- Record protocol
- Secure electronic transaction
- Certificate scheme
- DEK-info
Which of the following firewalls receives protocol data units, interprets them and passes through the same or different protocol data units that achieves either the same result or a modified result?
- Gaurd
- Personal firewall
- Packet filtering gateway
- Digital signature
- Message confidentiality
Which of the following security design issues describes the status of security at the time of the plan?
- Timetable
- Current state
- Requirements
- Risk analysis
- Realism