�Internet Security
This test is based on CISSP certification exam. In this test, the various questions are included perspective to CISSP exam which are useful also for other exams like UGC/NET and GATE.
Questions
Which of the following is called non-repudiation as security requirements in application-to-application communication?
- To ensure that no one can read the message except the intended receiver
- To assure the receiver that the received message has not been altered in any way from the original
- A mechanism to prove that the sender really sent this message
- The process of proving one's identity
- Both (2) and (4)
Which of the following is called integrity as security requirements in application-to-application communication?
- To ensure that no one can read the message except the intended receiver
- To assure the receiver that the received message has not been altered in any way from the original
- A mechanism to prove that the sender really sent this message
- The process of proving one's identity
- None of the above
Which of the following is/are applicable for digital certificate in cryptography?
- It uses asymmetric encryption.
- A digital certificate can also provide information about the user's public key.
- The other party's public key can be extracted from the certificate.
- A digital certificate is issued by the client and server communication.
- All of the above
Which of the following assumptions is/are false for asymmetric encryption in cryptography?
- It is slower than symmetric encryption.
- Both the sender and recipient can encrypt and decrypt all messages by the secret key.
- Any message that is encrypted by using the private key can only be decrypted by using the matching public key.
- The same message encrypted by the public key must be decrypted by the private key but with the same process.
- None of the above
Which of the following is/are applicable for Message Authentication Code (MAC) in cryptography?
- By using MAC, the authenticity assurances affirm the message's origin.
- MAC values are both generated and verified using the same secret key.
- MACs do not provide the property of non-repudiation.
- All of the above
- Both (1) and (2)
Which of the following is/are correct about Electronic Codebook (ECB) in block ciphers?
- In ECB, the secret key is used to encrypt the plaintext block to form a ciphertext block.
- It is susceptible to a variety of brute-force attacks.
- It allows data to be encrypted in units smaller than the block size.
- It adds a feedback mechanism to the encryption scheme.
- Both (1) and (2)
Which of the following is/are correct about brute force attack?
- These are the attacks by which the password database is attacked with all types of letters and combinations.
- It is one of the attacks that uses various methods to obtain the users' passwords.
- It checks the encrypted password database with words found in a dictionary.
- In this attack, the session is captured and replayed against the system.
- Both (1) and (3)
Which of the following is/are correct about replay attack?
- These are the attacks by which the password database is attacked with all types of letters and combinations.
- It is one of the attacks that uses various methods to obtain the users' passwords.
- It checks the encrypted password database with words found in a dictionary.
- In this attack, the session is captured and replayed against the system.
- None of the above
Which of the following is/are incorrect about Kerberos protocol?
- It is used to provide mutual authentication.
- Kerberos is build on symmetric key cryptography.
- Kerberos does not use public-key cryptography.
- Kerberos protocol messages are protected against eavesdropping and replay attacks.
- None of the above
What is the work of Output Feedback (OFB) mode?
- It does not produce the same ciphertext as that of plaintext.
- In this mode, the secret key is used to encrypt the plaintext block to form a ciphertext block.
- It is a block cipher implementation as a self-synchronising stream cipher.
- This block cipher implementation is conceptually similar to a synchronous stream cipher.
- Both (1) and (4)
What are the limitations of using Kerberos protocol?
- It requires continuous availability of a central server.
- The clocks of the involved hosts must be synchronised within configured limits.
- Each network should have own keys.
- All of the above
- Both (1) and (2)
Which of the following is/are correct about IP Security (IPsec) protocol?
- It provides either message authentication and/ or encryption.
- It is a set of multiple protocols.
- Central to IPsec is the concept of a security association (SA).
- All of the above
- Both (1) and (3)
Which of the following is a false statement about Ron Rivest's of SKC algorithms?
- RC2 is 64-bit block cipher using variable-sized keys designed to replace DES.
- RC4 is a stream cipher using variable sized keys.
- RC5 is block-cipher supporting a variety of block sizes (32, 64, or 128 bits), key sizes, etc.
- RC6 is a 128-bit block cipher based upon and an improvement over RC5, RC6, etc.
- None of the above
Which of the following is/are applicable for Pretty Good Privacy (PGP) cryptographic security?
- It is based on the public key cryptographic algorithm.
- It is used for digital signature.
- PGP is available as a plug-in for many e-mail clients.
- It used SHA or MD5 algorithm.
- All of the above