Network Security (GATE)
Network security authentication basics of public key and private key cryptography digital signatures digital certificates firewalls
Questions
Which type of security devices block the surplus traffic?
- Active devices
- Preventive devices
- Unified Threat Management (UTM) devices
- Passive devices
- Network devices
A type of authentication in which a user has a secret password and system checks password to authenticate the user is called
- address-based authentication
- crypto-based authentication
- identity
- password-based authentication
- biometrics
Which of the following is an example of Unified Threat Management (UTM) security devices?
- Antivirus scanning device
- Vulnerability assessment appliance
- Intrusion detection appliance
- Web caching
- Penetration testing device
Which of the following hash algorithms is much less processor-intensive and the message digest is much shorter than the message?
- Password Hashing
- Digital Signature Hashing
- Downline Load Hashing
- Message Fingerprint Hashing
- Message Integrity Hashing
Which of the following is a method of encryption by which units of plain text are substituted with cipher text according to a regular system?
- Substitution cipher technique
- Transposition cipher technique
- Block cipher technique
- Stream cipher technique
- Cipher text
Which of the following authentication tools consists of a question-answer dialog where the user responds to a set of pre-recorded questions or a token device that generates passwords or responses based on a pre-determined algorithm?
- Biometric authentication
- Out-of-band authentication
- Hardware tokens
- Challenge response
- Software tokens
Which of the following algorithms is a symmetric-key cryptography algorithm?
- ElGamal cryptographic algorithm
- RSA algorithm
- IDEA algorithm
- Elliptic curve discrete logarithm
- Diffie-Hellman algorithm
A firewall technology which is a hybrid combination of a dynamic (stateful) packet filter and a circuit level proxy is called
- cutoff proxy
- dynamic packet filter
- circuit level gateway
- stateful inspection
- air gap
Which of the following is not a disadvantage of static packet filter?
- Static packet filter only examines IP and TCP headers.
- Static packet filter offers low level of security.
- Static packet filter lacks state awareness.
- Static packet filter can be established without following the RFC-recommended 3 way-handshake.
- Static packet filter is susceptible to IP spoofing.
Which of the following statements is incorrect about elliptic curve cryptography algorithm?
- Elliptic curve cryptography algorithm is a public key algorithm.
- Key sizes in an elliptic curve cryptography algorithm are in the order of 1024 bits.
- Elliptic curve cryptography works with points on a curve.
- In elliptic curve cryptography algorithm, elliptic curve is designed by the equation y2 = x3 + ax + b.
- For generating an elliptic curve public key, algorithm picks a certain point F on the curve and calculates Ap = As*F. Here, Ap is a public key and As is a secret key.
Which of the following is an advantage of air-gap firewall technology?
- Low cost
- No unexpected traffic via other sockets
- State awareness
- Provides services for a wide range of protocols
- Highest level of security
Which of the following is an incorrect statement about a digital certificate?
- Digital certificate or digital id is a kind of digital passport or credential.
- Digital id is the user's public key that has itself been digitally signed by someone trusted to do so.
- Organisations using digital certificates do not require a relationship with the remote site.
- Digital certificate is used to verify the trustworthiness of information.
- Digital certificate is used to confirm that a public key belongs to a specific organisation.
Which matured tunneling technology allows IP payloads to be encrypted and then encapsulated in an IP header to be sent across a corporate IP inter-network or a public IP inter-network, such as the internet?
- IPX Tunneling
- IP Security (IPSec) Tunnel Mode
- System Network Architecture (SNA) Tunneling
- Point-to-Point Tunneling Protocol (PPTP)
- Layer 2 Tunneling Protocol (L2TP)
Which of the following is an incorrect statement about Kerberos protocol?
- Kerberos protocol is a network authentication protocol.
- Kerberos protocol is a secure protocol.
- Kerberos does not perform mutual authentication.
- Kerberos protocol requires only a single login per session.
- Kerberos depends on a trusted third party – a Key Distribution Centre (KDC).
Which of the following statements is incorrect about Rijndael security algorithm?
- Rijndael security algorithm is a type of DES security algorithm.
- Rijndael security algorithm allows only 128, 192 and 256-bit key sizes.
- Rijndael security algorithm consists of an initial round key addition, Nr-1 rounds and a final round, where Nr is the number of rounds.
- Rijndael security algorithm is designed by Joan Daemen and Vincent Rijmen.
- Rijndael is well-suited for software implementations on 8-bit processors.