Cloud Computing Quiz

Denial of service (DOS) security attacks are intended to compromise a system's _______.

• Confidentiality

• Availability

• Ingerity

• Authentificty

Which of the following statements is true for malwares?

• They are computer programs that can infect other programs

• Many of them can propagate by attaching themselves to files and emails

• They may not always do outright damage

• All of the above

Which of the following techniques system administrators use to reduce the risk of password hacking?

• Preventing users from using alphanumeric passwords

• Enforcing a cap on the number of password retries at login before the account gets locked

• Encouraging usage of easy to remember dictionary words as passwords

• All of the above

Which of the following statements about basic encryption techniques NOT true?

• The key used in Caesar cipher should be kept private between the sender and the receiver

• The key used in Caesar cipher should be made publicly available to allow the receiver to decrypt the message

• The keys used in one-time pads need to be kept private between the sender and the receiver

• The keys used in one-time pads are a pre-selected sequence of random numbers

Which of the following statements about private key cryptography is true?

• The same key is used by both the sender and the receiver to encrypt and decrypt a message

• The sender uses one key to encrypt a message and the receiver uses another key to decrypt it.

• The sender and the receiver do not have to agree upon a shared key in advance

• All of the above

Which of the following statements is true for public key cryptosystem?

• A secret message should be encrypted using the public key of the sender and decrypted using the private key of the receiver

• A secret message should be encrypted using the private key of the sender and decrypted using the public key of the receiver
  барлык вариант дурыс

• A secret message should be encrypted using the private key of the sender and decrypted using the public key of the receiver
  базада баска варриант жок так что бари дурыс

• A secret message should be encrypted using the public key of the receiver and decrypted using the private key of the receiver

In case of digital signatures, which of the following statements will be true? (Digital signatures are not meant to be secret messages, instead they are used to demonstrate that the message must have originated from a particular sender who signed it).

• Бари бирдей , бари дурыс The message will need to be encrypted using the sender’s private key. Anyone can then use the sender’s public key to decrypt it, and thereby verify that it must have been encrypted (signed) by that particular sender.

• The message will need to be encrypted using the sender’s private key. Anyone can then use the sender’s public key to decrypt it, and thereby verify that it must have been encrypted (signed) by that particular sender.

• The message will need to be encrypted using the sender’s private key. Anyone can then use the sender’s public key to decrypt it, and thereby verify that it must have been encrypted (signed) by that particular sender.

• The message will need to be encrypted using the sender’s private key. Anyone can then use the sender’s public key to decrypt it, and thereby verify that it must have been encrypted (signed) by that particular sender.

Which of the following statements is NOT true about these cyber defense systems?

• Honeypots are legitimate parts of the site that are actually isolated and monitored, and act as traps for attackers

• Intrusion detection systems cannot look inside the contents of the data packets, and therefore only use traffic filtering rules.

• Honeypots can be used to learn about organization’s security weaknesses

• None of the above

Which of the following should be practiced to prevent confidential data loss from cyberattacks?

• Store the encrypted data and the encryption key at different locations

• Use a two-factor access control

• Limit third-party access to the internal network

• All of the above

Suppose your organization needs multiple people to store and update transaction records while ensuring immutability. Which one should you choose?

• Responsible Disclosure

• Full Disclosure

• Market Disclosure

• None of the above