Bài học không có tiêu đề

Multiple Choice

a

• a

Multiple Choice

Which access control model allows the definition of any complex relationship between attributes using so-called policies?

• DAC

• 
  

  MAC

• 
  

  RBAC

• ABAC

Multiple Choice

z

• z

• z

Multiple Choice

Which access control model defines system-specific security properties which overwrite user-defined rights?

• DAC

• MAC

• RBAC

• ABAC

Multiple Choice

Which implementation of an access control matrix stores the values column-by-column (object view)?

• Access Control Lists (ACL)

• Capabilities

Multiple Choice

For which access control model are rights granted for individual objects by the owner of the object?

• DAC)

• MAC)

• RBAC

• ABAC

Multiple Choice

Which is NOT one of the three typical authentication factors?

Knowledge

Business impact

Possession

Inherence (biometrics)

• A

• B

• C

• D

Multiple Choice

What is mutual authentication?

Combination of different authentication methods

High password complexity

Two parties authenticate each other

• A

• b

• c

Multiple Choice

Which implementation of an access control matrix allows to efficiently determine the rights of a specific user (subject view)?

• 
  

  Access Control Lists (ACL)

• 
  

  Capabilities

Multiple Choice

Fingerprint recognition is an example of authentication based on…

Knowledge

Possession

Inherence (biometrics)

• A

• B

• C

Multiple Choice

A password is an example of authentication based on…

Knowledge

Possession

Inherence (biometrics)

• a

• b

• c

Multiple Choice

An ID token is an example of authentication based on…

Knowledge

Possession

Inherence (biometrics)

• a

• b

• c

Multiple Choice

What is multi-factor authentication?

Combination of different authentication methods

High password complexity

Two parties authenticate each other

• a

• b

• c

Multiple Choice

What is the advantage of adding a salt value instead of simply storing the hash value of a password?

Dictionary attacks are easier

Different hash values for same password of different users

Same hash value for same password on different servers

• a

• b

• c

Multiple Choice

What is the advantage of using a challenge response protocol instead of simply transmitting the hash value of the password?

Performance

Increased security

Anonymity

Submit

• a

• b

• c

Multiple Choice

Which protection goal cares about the correctness of data?

Confidentiality

Integrity

Availability

• a

• b

• c

Multiple Choice

Which protection goal wants to ensure that only the intended receiver can read your email message?

Confidentiality

Integrity

Authenticity

Non-Repudiation

Availability

• a

• b

• c

• d

• e

Multiple Choice

For which protection goal would encryption typically NOT help?

Confidentiality

Availability

• a

• b

Multiple Choice

Which protection goal cares about reliable service provisioning?

Confidentiality

Non-Repudiation

Availability

• a

• b

• c

Multiple Choice

Which measure should typically be used to achieve integrity, authenticity, and non-repudiation?

Redundancy

Data backups

Digital signatures

• a

• b

• c

Multiple Choice

Which measure should typically be used to achieve confidentiality?

Encryption

Data backups

Digital signatures

• a

• b

• c

Multiple Choice

Which measure should typically be used to achieve availability?

Encryption

Redundancy

Digital signature

• a

• b

• c

Multiple Choice

An assignment rule is needed for mapping personal data to a person when implementing:

Independency

Anonymity

Pseudonymity

• a

• b

• c

Multiple Choice

The goal of safety is the protection against…

…negative consequences from legitimate actions (accidental threats).

…positive consequences from any kind of actions.

…negative consequences from unauthorized actions (intentional malice).

• a

• b

• c

Multiple Choice

A vulnerability is:

Anything that can harm an asset.

The unauthorized access to an IT system or information.

A weakness in design, implementation, or operation of an IT system.

• a

• b

• c

Multiple Choice

An asset is:

A weakness in design, implementation, or operation of an IT system.

An object/value which is required to meet (business) objectives.

The definition of security objectives and security requirements.

• a

• b

• c

Multiple Choice

A security policy is:

An object/value which is required to meet (business) objectives.

The definition of security objectives and security requirements.

The effect on the achievement of business objectives.

• a

• b

• c

Multiple Choice

A security control is:

A weakness in design, implementation, or operation of an IT system.

The definition of security objectives and security requirements.

A device or protective measure that counteracts a hazard.

• a

• b

• c

Multiple Choice

The business impact is:

The unauthorized access to an IT system or information.

The definition of security objectives and security requirements.

The effect on the achievement of business objectives.

• a

• b

• c

Multiple Choice

A risk is:

An object/value which is required to meet (business) objectives.

A device or protective measure that counteracts a hazard.

The combination of the probability of an event and its impact.

• a

• b

• c

Multiple Choice

The other area of cryptology besides cryptography is:

Cryptlinguistics

Cryptanalysis

Cryptmathematics

• a

• b

• c

Multiple Choice

What is NOT one of Kerckhoffs's main principles for cryptosystems?

The system should be practically secure.

The system should be more than ten years old.

The design of a system should not require secrecy.

A cryptosystem must be easy to use.

• a

• v

• c

• d

Multiple Choice

Which historical encryption method does not map a plaintext letter to the same ciphertext letter (for a specific key)?

Caesar Cipher

Modified Caesar Cipher

Vigenère Cipher

• a

• b

• c

Multiple Choice

When does an encryption method provide perfect security?

Does not always map a plaintext letter to the same ciphertext letter.

Secure against attackers with unlimited resources.

Resistant to attackers with limited resources.

• a

• v

• c

Multiple Choice

Which encryption method is perfectly secure?

Modified Caesar Cipher

One-Time Pad

Vigenère Cipher

• a

• v

• c

Multiple Choice

What is NOT one of the construction methods/design ideas for modern block ciphers?

Substitutions (for Confusion)

Security by obscurity

Permutations (for Diffusion)

Round based repetition

• a

• b

• c

• d

Multiple Choice

What is true for CBC (Cipher Block Chaining) in contrast to ECB (Electronic Code Book)?

The same plaintext blocks are mapped to the same ciphertext blocks.

Each plaintext block is linked with the preceding ciphertext via XOR and then encrypted.

An attacker can recognize the structure of the plain text.

• a

• b

• c

Multiple Choice

What is NOT a building block of a LFSR stream cipher?

A Pseudorandom number generator

XOR and shift operations

S-box for substitution

Pseudorandom keystream as output

• a

• b

• c

• d

Multiple Choice

What is NOT a typical property of a cryptographically strong hash function?

Mapping of arbitrary bit strings to bit strings of a fixed length

Preimage resistance

Efficient calculation

Collision resistance

Symmetric bit pattern of output value

• a

• v

• c

• d

• e

Multiple Choice

How many collisions exist for a cryptographically strong hash function?

None

One

Two

Infinite number

• a

• b

• c

• d

Multiple Choice

What is NOT an example for a cryptographic hash function?

MD5

AES

SHA-1

SHA-2

SHA-3

• a

• b

• c

• d

Fill in the Blanks

What is NOT one of the construction methods/design ideas for modern block ciphers?

Substitutions (for Confusion)

Security by obscurity

Permutations (for Diffusion)

Round based repetitionb

Fill in the Blanks

How many (own) keys does each participant in an asymmetric cryptosystem hold?

None

One

Two

Three

Fill in the Blanks

What is the basic idea of asymmetric cryptosystems?

One-way function without trapdoor

One-way function with trapdoor

Two-way function with limited input capacity

Two-way function with unlimited input capacity

Fill in the Blanks

Alice wants to send an encrypted message to Bob. Which key should she use to encrypt the message?

Public key of Alice

Secret key of Alice

Public key of Bob

Secret key of Bob

Fill in the Blanks

Alice wants to send a signed e-mail to Bob. Which key should she use to create the signature?

Public key of Alice

Secret key of Alice

Public key of Bob

Secret key of Bob

Fill in the Blanks

Which encryption method should be used in a hybrid cryptosystem to encrypt the messages (content) that is exchanged (except for the key)?

No encryption

Asymmetric encryption

Symmetric encryption

Submit

Fill in the Blanks

What is NOT a central requirement for a digital signature that should always be ensured?

Authenticity

Integrity

Confidentiality

Non-repudiation

Fill in the Blanks

Which of the three essential trust models relies on a central trusted authority?

Direct Trust

Web of Trust

Hierarchical Trust

Fill in the Blanks

How many personal (own) keys does a participant typically possess in an asymmetric cryptosystem?

None

One

Two

check

Three

Fill in the Blanks

What is NOT a central requirement for a digital signature that should always be ensured?

Authenticity

Integrity

Confidentiality

Non-repudiation

Fill in the Blanks

Which of the following best describes the key ownership in an asymmetric encryption system for a single user?

One shared secret key

Two keys: one public and one private

Two identical keys used in both directions

One key provided by a certification authority

Fill in the Blanks

In an asymmetric encryption scheme, who can verify a digital signature?

Only the sender using their private key.

Only the recipient using their private key.

Anyone who has access to the sender’s public key.

A trusted authority using a symmetric key.

Fill in the Blanks

What is NOT one of the two essential aspects of malware?

Means and mechanism of distribution

One-way function

Malicious behavior

Fill in the Blanks

Which kind of malware requires a host to be executed?

Virus

Trojan

Worm

Ransomware

Fill in the Blanks

hich kind of malware does NOT necessarily spread uncontrollably on a system and network?

Virus

Trojan

Worm

Fill in the Blanks

Which malware is a standalone program, i.e., does not require a host?

Virus

Worm

Fill in the Blanks

Which malware does NOT have the objective to analyze the behavior of the user and/or display unsolicited advertising?

Spyware

Adware

Ransomware

Fill in the Blanks

Which malware type offers at first glance a useful functionality but additionally also contains a hidden malicious functionality?

Virus

Trojan

Worm

Ransomware

Fill in the Blanks

Which malware threatens to perpetually block access to or publish a victim's data unless money is paid?

Virus

Trojan

Worm

Ransomware

Fill in the Blanks

What is NOT a typical protective measures against malware?

Virus scanner

Ad blocker

Firewall

Peer-to-peer network

Honeypot

Submit

Fill in the Blanks

What is the main purpose of IPsec?

Speeding up internet routing

Providing reliable data transport

Securing communication at the network layer

Managing IP addresses in subnets

Fill in the Blanks

What is NOT a typical attack in Local Area Networks (LANs)?

MAC spoofing

ARP spoofing

AES spoofing

IP spoofing

Fill in the Blanks

What is NOT one of the two modes of operations of IPsec?

transport mode

bridge mode

tunnel mode

Fill in the Blanks

What is used within IPsec to ensure confidentiality of a transmitted packet?

hash function

encapsulating security payload

authentication header

Fill in the Blanks

Where is the information (e.g., algorithms, keys, ...) about an established IPsec connection stored?

Security Association Database

Security Connection Database

Security Parameter Database

Security Policy Database

Fill in the Blanks

Where are the IPsec rules for handling IP packets stored?

Security Association Database

Security Connection Database

Security Parameter Database

Security Policy Database