OSI Security Architecture Quiz

What is the main objective of the OSI Security Architecture?

• To define how data is transmitted over the internet

• To define security attacks, mechanisms, and services

• To describe routing protocols for secure communication

• To provide encryption algorithms for network traffic

Which of the following is an example of a passive security attack?

• Denial of Service (DoS)

• Eavesdropping on network traffic

• Modifying transmitted messages

• Impersonation of a user

In OSI Security Architecture, which service ensures that the message sent by a sender has not been altered during transmission?

• Authentication

• Access control

• Data confidentiality

• Data integrity

Which security mechanism uses cryptographic techniques to protect against active attacks?

• Traffic padding

• Routing control

• Digital signatures

• Notarization

OSI Security Architecture classifies security services into which of the following broad categories?

• Confidentiality and Availability

• Authentication and Non-repudiation

• Data Confidentiality, Integrity, and Authentication

• Authentication, Access Control, Confidentiality, Integrity, and Non-repudiation

What is the key purpose of data confidentiality as a security service?

• To prevent unauthorized access to resources

• To ensure the origin of a message is authentic

• To protect sensitive data from unauthorized disclosure

• To verify that a message has not been altered

Which of the following is NOT considered a security mechanism in OSI Security Architecture?

• Digital signatures

• Encryption

• Traffic analysis

• Access control

Which security service ensures that only authorized entities can access specific resources or information?

• Data confidentiality

• Access control

• Non-repudiation

• Authentication

What type of security attack involves a third party pretending to be a legitimate sender?

• Replay attack

• Modification attack

• Masquerade attack

• Passive attack

Which of the following ensures the prevention of denial by a sender or receiver regarding a message transmission?

• Non-repudiation service

• Authentication service

• Access control service

• Confidentiality service