System and Network Security
This test consists of questions related to System and Network Security concepts, which is useful for CS and Gate students.
Questions
Which of the following is/are true about Cipher Block Chaining(CBC) and Cipher Feedback Mode (CFB)?
- The cipher feedback mode technique is more efficient as compared to cipher block chaining.
- CFB decryption is almost identical to CBC encryption performed in reverse.
- In CFB, the changed in the plaintext propagate forever in the ciphertext and encryption cannot be parallelized.
- All of the above.
- Both (2) and (3).
Which of the following is/are the false statements about PGP (Pretty Good Privacy) algorithm in e-mail security?
- PGP provides all security to the emails like privacy, digital signatures and compression.
- PGP does not work on Mac OS and Linux platform.
- PGP uses IDEA (International Data Encryption Standard) to encrypt the data.
- RSA uses a limited amount of data to encrypt or decrypt the data in PGP.
- None of the above
Which of the following services is/are not provided by Secure DNS (Domain Name System) (DNSsec)?
- DNSsec is used to store and retrieve the public keys.
- The data is approved by the owner's zone before return.
- DNSsec provides transaction and requests for authentication.
- Both (2) and (3).
- None of the above
Which of the following is a false statement about ActiveX control program for web security?
- Every ActiveX in a web page uses a digital signature to check the authenticity.
- ActiveX control is encountered and sandboxed in a web page.
- ActiveX control does not use monitor the code's behaviour.
- ActiveX control does not use any run-time interpreter like java.
- ActiveX control checks whether the creator is trusted or not.
Which of the following is/are true for web security scheme?
- A message sent using PGP (Pretty Good Privacy) is first converted into canonical form.
- In PGP and PEM, each message is encrypted with a one-time key.
- PGP provides non-repudiation.
- PGP does not support X.509 certificate.
- All of the above.
Which of the following is a false statement about Java applet security?
- Applets are inserted inside a JVM interpreter when the web page is loaded.
- An untrusted applet is bypassed in to sandbox to restrict its behaviour.
- A system call is made only when the applet is found trusted by the interpreter.
- An applet, which comes from a local disk cannot be trusted.
- A security monitor is placed, when the applet is try to access the system resources to check its approval.
Which of the following is/are false about CFG (Cipher Feedback Mode)?
- CFB can be used in stream data encryption and authentication.
- CFB allows any number of bits like 1, 8, 64 or 28.
- Any change to a cipher block affects all the following blocks in CFB.
- None of the above
- Both (2) and (3).
Which of the following is a false statement in SSL (Secure Socket Layer) in web security?
- SSL provides mutual authentication between the client and the server.
- SSL is also responsible for encryption of the message.
- SSL is also responsible for message integrity.
- SSL is used in banking and online transactions.
- SSL uses TCP protocol for secure communication.
Which of the following is/are true statement(s) about CRT (Counter) mode in network security?
- Counter (CTR) is used in high-speed network encryptions.
- Counter (CTR) encrypts a counter values as well feedback value.
- CRT is used in many applications in ATM (Asynchronous Transfer Mode).
- All of the above statements are true.
- Only (1) and (3) are true.
Which of the following statements is/are true about RC4 algorithm in network security?
- RC4 algorithm is applied for RSA security.
- RC4 never reuses a key.
- RC4 is used in the SSL/TLS secure web protocol, and in the WEP and WPA wireless LAN security protocols.
- It is a variable key-size stream cipher with byte-oriented operations.
- All of the above
Which of the following is a false statement?
- Hash functions condenses arbitrary message to fixed size.
- A digital signature uses a hash function.
- There are quite a few similarities in the evolution of hash functions and block ciphers.
- Hash function is used to produce a fingerprint of a file, message, or other block of data.
- None of the above
Which of the following statements is false about Message Authentication Code (MAC)?
- MAC uses an algorithm that creates a small fixed-sized block.
- It uses both secret key as well as public key to generate a small fixed-size block of data.
- It provides assurance that message is unaltered and comes from sender.
- MAC algorithm need not be reversible.
- MAC does not work like a digital signature.
Which of the following is not true about SHA (Secure Hash Algorithm) algorithm?
- SHA function processing message in 1024-bit blocks.
- It is widely used in SSL, PGP, SSH, S/MIME, and IPsec.
- SHA was designed for compatibility with increased security provided by the AES cipher.
- None of the above
- Both (3) and (4).
Which of the following is not true about digital signature?
- A digital signature verifies author, date and time of signature.
- Digital signature works on public-key cryptography.
- Digital signature protects two parties, who exchange messages from any third party.
- A digital signature made by sender signing entire message or hash with private-key.
- Both (3) and (4).
What is the use of Ticket-Granting Server (TGS) in Kerberos?
- It provides login validity of the user.
- It provides synchronization to the message.
- It provides message authentication.
- It provides proof of identity of users.
- None of the above