IT Sec quiz

What is the definition of confidentiality in the security context?

• Ensuring that data is not modified without authorization.

• Ensuring that only authorized users can access data.

• Ensuring that actions cannot be denied by the subjects who performed them.

• Ensuring that data is available when needed.

• Ensuring that data is encrypted before being transmitted.

Which of the following is not a security goal?

• Integrity

• Availability

• Authenticity

• Scalability

• Confidentiality

What is the purpose of a Message Authentication Code (MAC)?

• To encrypt data for secure transmission.

• To ensure data integrity and authenticity.

• To generate a public key for encryption.

• To provide anonymity for the sender.

• To compress data for faster transmission.

Which of the following is true about public-key cryptography?

• The same key is used for encryption and decryption.

• The public key is used for decryption, and the private key is used for encryption.

• The private key is used for decryption, and the public key is used for encryption.

• Public-key cryptography is faster than symmetric-key cryptography.

• Public-key cryptography does not require key distribution.

What is the main advantage of using a digital signature?

• It ensures data confidentiality.

• It provides non-repudiation and authenticity.

• It compresses data for faster transmission.

• It encrypts data for secure storage.

• It allows for anonymous communication.

What is the primary purpose of a challenge-response protocol?

• To encrypt data for secure transmission.

• To verify the identity of a user or system.

• To compress data for faster transmission.

• To generate a public key for encryption.

• To provide anonymity for the sender.

What is a replay attack?

• An attack where the attacker intercepts and retransmits valid data to gain unauthorized access.

• An attack where the attacker guesses passwords using a dictionary.

• An attack where the attacker modifies data in transit.

• An attack where the attacker floods the network with traffic.

• An attack where the attacker exploits a buffer overflow vulnerability.

What is the purpose of a salt in password hashing?

• To encrypt the password before storage.

• To make the password longer and more complex.

• To prevent rainbow table attacks by adding randomness.

• To compress the password for faster storage.

• To allow the password to be decrypted easily.

What is the main objective of the Bell-LaPadula model?

• To ensure data integrity.

• To control information flow based on security levels.

• To provide non-repudiation for access logs.

• To enforce separation of duties.

• To ensure availability of resources.

In the Bell-LaPadula model, what does the "no read-up" property enforce?

• A subject cannot read data at a higher security level.

• A subject cannot write data to a lower security level.

• A subject cannot read data at a lower security level.

• A subject cannot write data to a higher security level.

• A subject cannot execute programs at a higher security level.