System and Network Security

This test consists of questions related to System and Network Security concepts, which is useful for CS and Gate students.

15 Questions Published

Questions

Question 1 Multiple Choice (Single Answer)

Which of the following is/are true about Cipher Block Chaining(CBC) and Cipher Feedback Mode (CFB)?

  1. The cipher feedback mode technique is more efficient as compared to cipher block chaining.
  2. CFB decryption is almost identical to CBC encryption performed in reverse.
  3. In CFB, the changed in the plaintext propagate forever in the ciphertext and encryption cannot be parallelized.
  4. All of the above.
  5. Both (2) and (3).
Question 2 Multiple Choice (Single Answer)

Which of the following is/are the false statements about PGP (Pretty Good Privacy) algorithm in e-mail security?

  1. PGP provides all security to the emails like privacy, digital signatures and compression.
  2. PGP does not work on Mac OS and Linux platform.
  3. PGP uses IDEA (International Data Encryption Standard) to encrypt the data.
  4. RSA uses a limited amount of data to encrypt or decrypt the data in PGP.
  5. None of the above
Question 3 Multiple Choice (Single Answer)

Which of the following services is/are not provided by Secure DNS (Domain Name System) (DNSsec)?

  1. DNSsec is used to store and retrieve the public keys.
  2. The data is approved by the owner's zone before return.
  3. DNSsec provides transaction and requests for authentication.
  4. Both (2) and (3).
  5. None of the above
Question 4 Multiple Choice (Single Answer)

Which of the following is a false statement about ActiveX control program for web security?

  1. Every ActiveX in a web page uses a digital signature to check the authenticity.
  2. ActiveX control is encountered and sandboxed in a web page.
  3. ActiveX control does not use monitor the code's behaviour.
  4. ActiveX control does not use any run-time interpreter like java.
  5. ActiveX control checks whether the creator is trusted or not.
Question 5 Multiple Choice (Single Answer)

Which of the following is/are true for web security scheme?

  1. A message sent using PGP (Pretty Good Privacy) is first converted into canonical form.
  2. In PGP and PEM, each message is encrypted with a one-time key.
  3. PGP provides non-repudiation.
  4. PGP does not support X.509 certificate.
  5. All of the above.
Question 6 Multiple Choice (Single Answer)

Which of the following is a false statement about Java applet security?

  1. Applets are inserted inside a JVM interpreter when the web page is loaded.
  2. An untrusted applet is bypassed in to sandbox to restrict its behaviour.
  3. A system call is made only when the applet is found trusted by the interpreter.
  4. An applet, which comes from a local disk cannot be trusted.
  5. A security monitor is placed, when the applet is try to access the system resources to check its approval.
Question 7 Multiple Choice (Single Answer)

Which of the following is/are false about CFG (Cipher Feedback Mode)?

  1. CFB can be used in stream data encryption and authentication.
  2. CFB allows any number of bits like 1, 8, 64 or 28.
  3. Any change to a cipher block affects all the following blocks in CFB.
  4. None of the above
  5. Both (2) and (3).
Question 8 Multiple Choice (Single Answer)

Which of the following is a false statement in SSL (Secure Socket Layer) in web security?

  1. SSL provides mutual authentication between the client and the server.
  2. SSL is also responsible for encryption of the message.
  3. SSL is also responsible for message integrity.
  4. SSL is used in banking and online transactions.
  5. SSL uses TCP protocol for secure communication.
Question 9 Multiple Choice (Single Answer)

Which of the following is/are true statement(s) about CRT (Counter) mode in network security?

  1. Counter (CTR) is used in high-speed network encryptions.
  2. Counter (CTR) encrypts a counter values as well feedback value.
  3. CRT is used in many applications in ATM (Asynchronous Transfer Mode).
  4. All of the above statements are true.
  5. Only (1) and (3) are true.
Question 10 Multiple Choice (Single Answer)

Which of the following statements is/are true about RC4 algorithm in network security?

  1. RC4 algorithm is applied for RSA security.
  2. RC4 never reuses a key.
  3. RC4 is used in the SSL/TLS secure web protocol, and in the WEP and WPA wireless LAN security protocols.
  4. It is a variable key-size stream cipher with byte-oriented operations.
  5. All of the above
Question 11 Multiple Choice (Single Answer)

Which of the following is a false statement?

  1. Hash functions condenses arbitrary message to fixed size.
  2. A digital signature uses a hash function.
  3. There are quite a few similarities in the evolution of hash functions and block ciphers.
  4. Hash function is used to produce a fingerprint of a file, message, or other block of data.
  5. None of the above
Question 12 Multiple Choice (Single Answer)

Which of the following statements is false about Message Authentication Code (MAC)?

  1. MAC uses an algorithm that creates a small fixed-sized block.
  2. It uses both secret key as well as public key to generate a small fixed-size block of data.
  3. It provides assurance that message is unaltered and comes from sender.
  4. MAC algorithm need not be reversible.
  5. MAC does not work like a digital signature.
Question 13 Multiple Choice (Single Answer)

Which of the following is not true about SHA (Secure Hash Algorithm) algorithm?

  1. SHA function processing message in 1024-bit blocks.
  2. It is widely used in SSL, PGP, SSH, S/MIME, and IPsec.
  3. SHA was designed for compatibility with increased security provided by the AES cipher.
  4. None of the above
  5. Both (3) and (4).
Question 14 Multiple Choice (Single Answer)

Which of the following is not true about digital signature?

  1. A digital signature verifies author, date and time of signature.
  2. Digital signature works on public-key cryptography.
  3. Digital signature protects two parties, who exchange messages from any third party.
  4. A digital signature made by sender signing entire message or hash with private-key.
  5. Both (3) and (4).
Question 15 Multiple Choice (Single Answer)

What is the use of Ticket-Granting Server (TGS) in Kerberos?

  1. It provides login validity of the user.
  2. It provides synchronization to the message.
  3. It provides message authentication.
  4. It provides proof of identity of users.
  5. None of the above