NEW
Font size
S
M
L
XL
WorksheetsDSP-Minor1
Total questions: 20
Worksheet time: 16mins
Name
Class
Date
1.
Which of the following public key encryption and digital signature schemes is most similar to the Diffie-Hellman protocol?
a)
RSA encryption
b)
RSA signatures
c)
ElGamal signatures
d)
ESDSA
2.
What is the best way to avoid an attack of brute force on a device where the attacker tries to guess the password at a login prompt.
a)
store passwords in key escrow file
b)
use salted hashes
c)
disallow remote login
d)
lock the screen after few failed login attempts
3.
In the SHA-512, the original message length size is 562 bits, how many bits can be padded to bring total message into block size of 1024 bits?
a)
224 bits
b)
310 bits
c)
246 bits
d)
334 bits
4.
Which cryptosystems are suitable for resource-restricted devices?
a)
RSA
b)
DES
c)
DSA
d)
ECC
5.
Suppose Alice wants to encrypt and send a message to Bob. Which of the following should be included in the encrypted message so that Bob can detect the “freshness” of the message?
a)
Nonce
b)
Monotonically increasing number
c)
Her public key certificates
d)
Time-stamp
6.
How many people must be in the same room for the chance to be greater than even that at least two people share the same birthday?
a)
36
b)
43
c)
56
d)
23
7.
which one of the following statements is/are correct about s-http and https?
a)
Both provides same functionality
b)
https provides less security compare to s-http
c)
https used for protection of single message, where as s-http used for protection of all messages
d)
s-http protects each message sent between two computers, where as https protects communication channel between two computers, message and all.
8.
Using ---------------- during the session-key exchange can circumvent the man-in the-middle attack
a)
key management
b)
digital rights management
c)
key distribution
d)
digital signatures
9.
Which of the following produces a variable-length hash value, whereas the others produce a fixed length value?
a)
MD5
b)
AVALH
c)
SHA512
d)
HAVAL
10.
What is the best definition of a security model?
a)
A security model provides a framework to implement a security policy.
b)
A security model is a technical evaluation of each part of a computer system to assess its concordance with security standards.
c)
A security model is the process of formal acceptance of a certified configuration
d)
A security model states policies an organization must follow
11.
What is a covert channel?
a)
Any communication used to transmit secret or top secret data
b)
A trusted path between the TCB and the rest of the system
c)
Any channel that crosses the security perimeter
d)
A method that is used to pass information and that is not normally used for communication
12.
________________expresses that the communication partner executes as event during the run in which the calim event occurs.
a)
weak aliveness
b)
Recent aliveness in correct role
c)
Weak aliveness in correct role
d)
Recent aliveness
13.
If an agent performs a claim event and the intended communication partner is honest, this partner executes an event, according to …..........
a)
Recent aliveness
b)
weak aliveness in correct role
c)
recent aliveness in correct role
d)
weak aliveness
14.
________________ indicates that everything you planned to happen in the protocol description occurs in the trace as well.
a)
synchronization
b)
injective synchronization
c)
clock synchronization
d)
Non-injective synchronisation
15.
Protocols that satisfying non-injective synchronisation are vulnerable to ______________
a)
MITM attack
b)
Insider attack
c)
Replay attack
d)
DoS attck
16.
Which of the following cryptographic algorithms should be used for ensuring integrity and authenticity of a message?
a)
RSA
b)
ECC
c)
SHA1 and HMAC
d)
SHA-1
17.
________________are an interactive approach in which one person proves to another that a statement is true without revealing anything other than the statement's truthfulness.
a)
Authentication functions
b)
Security properties
c)
None of the above
d)
Zero-knowledge proofs
18.
Kerberos primarily addresses _________________using a ____________cryptosystem
a)
Client–server authentication, symmetric
b)
Trusted authentication, asymmetric
c)
Privacy issue, symmetric
d)
Client–server authentication, asymmetric
19.
Which factors must be considered when implementing Kerberos authentication?
a)
Kerberos tickets can be spoofed using replay attacks to network resources.
b)
Kerberos requires a centrally managed database of all user and resourcepasswords
c)
Kerberos uses clear text passwords.
d)
Kerberos can be susceptible to man in the middle attacks to gainunauthorized access
20.
Why are clocks used in a Kerberos authentication system?
a)
To ensure proper connections
b)
To generate seed valu for encryption algorithms
c)
To check if ticket is expired or not
d)
To becnh mark encryption algorithms
Reset
