Network Security (GATE)

Network security authentication basics of public key and private key cryptography digital signatures digital certificates firewalls

15 Questions Published

Questions

Question 1 Multiple Choice (Single Answer)

Which type of security devices block the surplus traffic?

  1. Active devices
  2. Preventive devices
  3. Unified Threat Management (UTM) devices
  4. Passive devices
  5. Network devices
Question 2 Multiple Choice (Single Answer)

A type of authentication in which a user has a secret password and system checks password to authenticate the user is called

  1. address-based authentication
  2. crypto-based authentication
  3. identity
  4. password-based authentication
  5. biometrics
Question 3 Multiple Choice (Single Answer)

Which of the following is an example of Unified Threat Management (UTM) security devices?

  1. Antivirus scanning device
  2. Vulnerability assessment appliance
  3. Intrusion detection appliance
  4. Web caching
  5. Penetration testing device
Question 4 Multiple Choice (Single Answer)

Which of the following hash algorithms is much less processor-intensive and the message digest is much shorter than the message?

  1. Password Hashing
  2. Digital Signature Hashing
  3. Downline Load Hashing
  4. Message Fingerprint Hashing
  5. Message Integrity Hashing
Question 5 Multiple Choice (Single Answer)

Which of the following is a method of encryption by which units of plain text are substituted with cipher text according to a regular system?

  1. Substitution cipher technique
  2. Transposition cipher technique
  3. Block cipher technique
  4. Stream cipher technique
  5. Cipher text
Question 6 Multiple Choice (Single Answer)

Which of the following authentication tools consists of a question-answer dialog where the user responds to a set of pre-recorded questions or a token device that generates passwords or responses based on a pre-determined algorithm?

  1. Biometric authentication
  2. Out-of-band authentication
  3. Hardware tokens
  4. Challenge response
  5. Software tokens
Question 7 Multiple Choice (Single Answer)

Which of the following algorithms is a symmetric-key cryptography algorithm?

  1. ElGamal cryptographic algorithm
  2. RSA algorithm
  3. IDEA algorithm
  4. Elliptic curve discrete logarithm
  5. Diffie-Hellman algorithm
Question 8 Multiple Choice (Single Answer)

A firewall technology which is a hybrid combination of a dynamic (stateful) packet filter and a circuit level proxy is called

  1. cutoff proxy
  2. dynamic packet filter
  3. circuit level gateway
  4. stateful inspection
  5. air gap
Question 9 Multiple Choice (Single Answer)

Which of the following is not a disadvantage of static packet filter?

  1. Static packet filter only examines IP and TCP headers.
  2. Static packet filter offers low level of security.
  3. Static packet filter lacks state awareness.
  4. Static packet filter can be established without following the RFC-recommended 3 way-handshake.
  5. Static packet filter is susceptible to IP spoofing.
Question 10 Multiple Choice (Single Answer)

Which of the following statements is incorrect about elliptic curve cryptography algorithm?

  1. Elliptic curve cryptography algorithm is a public key algorithm.
  2. Key sizes in an elliptic curve cryptography algorithm are in the order of 1024 bits.
  3. Elliptic curve cryptography works with points on a curve.
  4. In elliptic curve cryptography algorithm, elliptic curve is designed by the equation y2 = x3 + ax + b.
  5. For generating an elliptic curve public key, algorithm picks a certain point F on the curve and calculates Ap = As*F. Here, Ap is a public key and As is a secret key.
Question 11 Multiple Choice (Single Answer)

Which of the following is an advantage of air-gap firewall technology?

  1. Low cost
  2. No unexpected traffic via other sockets
  3. State awareness
  4. Provides services for a wide range of protocols
  5. Highest level of security
Question 12 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about a digital certificate?

  1. Digital certificate or digital id is a kind of digital passport or credential.
  2. Digital id is the user's public key that has itself been digitally signed by someone trusted to do so.
  3. Organisations using digital certificates do not require a relationship with the remote site.
  4. Digital certificate is used to verify the trustworthiness of information.
  5. Digital certificate is used to confirm that a public key belongs to a specific organisation.
Question 13 Multiple Choice (Single Answer)

Which matured tunneling technology allows IP payloads to be encrypted and then encapsulated in an IP header to be sent across a corporate IP inter-network or a public IP inter-network, such as the internet?

  1. IPX Tunneling
  2. IP Security (IPSec) Tunnel Mode
  3. System Network Architecture (SNA) Tunneling
  4. Point-to-Point Tunneling Protocol (PPTP)
  5. Layer 2 Tunneling Protocol (L2TP)
Question 14 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about Kerberos protocol?

  1. Kerberos protocol is a network authentication protocol.
  2. Kerberos protocol is a secure protocol.
  3. Kerberos does not perform mutual authentication.
  4. Kerberos protocol requires only a single login per session.
  5. Kerberos depends on a trusted third party – a Key Distribution Centre (KDC).
Question 15 Multiple Choice (Single Answer)

Which of the following statements is incorrect about Rijndael security algorithm?

  1. Rijndael security algorithm is a type of DES security algorithm.
  2. Rijndael security algorithm allows only 128, 192 and 256-bit key sizes.
  3. Rijndael security algorithm consists of an initial round key addition, Nr-1 rounds and a final round, where Nr is the number of rounds.
  4. Rijndael security algorithm is designed by Joan Daemen and Vincent Rijmen.
  5. Rijndael is well-suited for software implementations on 8-bit processors.