信息安全工程师当天每日一练试题地址：www.cnitpm.com/exam/ExamDay.aspx?t1=6

往期信息安全工程师每日一练试题汇总：www.cnitpm.com/class/27/e6_1.html

信息安全工程师每日一练试题（2021/8/26）在线测试：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2021/8/26

点击查看：更多信息安全工程师习题与指导

信息安全工程师每日一练试题内容（2021/8/26）

试题1：

S/Key口令是一种一次性口令生产方案，它可以对抗（）
A、恶意代码木马攻击
B、拒绝服务攻击
C、协议分析攻击
D、重放攻击

试题解析与讨论：www.cnitpm.com/st/2845025503.html
试题参考答案：D

试题2：

注入语句：http：//xxx.xxx.xxx/abc.asp?p=YY and user>0不仅可以判断服务器的后台数据库是否为SQL-SERVER，还可以得到（）
A、当前连接数据库的用户数据
B、当前连接数据库的用户名
C、当前连接数据库的用户口令
D、当前连接的数据库名

试题解析与讨论：www.cnitpm.com/st/2846214573.html
试题参考答案：B

试题3： 下列关于数字签名说法正确的是（  ）。
A.数字签名不可信
B.数字签名不可改变
C.数字签名可以否认
D.数字签名易被伪造
试题解析与讨论：www.cnitpm.com/st/411153134.html
试题参考答案：B

试题4： DSS数字签名标准的核心是数字签名算法DSA，该签名算法中杂凑函数采用的是（）。
A. SHA1
B. MD5
C. MD4
D. SHA2
试题解析与讨论：www.cnitpm.com/st/3275324398.html
试题参考答案：A

试题5： 应用代理防火墙的主要优点是（）
A.加密强度高
B.安全控制更细化、更灵活
C.安全服务的透明性更好
D.服务对象更广泛
试题解析与讨论：www.cnitpm.com/st/3271018450.html
试题参考答案：B

试题6： 无线传感器网络容易受到各种恶意攻击，以下关于其防御手段说法错误的是（）。
A.采用干扰区内节点切换频率的方式抵御干扰
B.通过向独立多路径发送验证数据来发现异常节点
C.利用中心节点监视网络中其它所有节点来发现恶意节点
D.利用安全并具有弹性的时间同步协议对抗外部攻击和被俘获节点的影响
试题解析与讨论：www.cnitpm.com/st/3274326177.html
试题参考答案：C

试题7： 身份认证是证实客户的真实身份与其所声称的身份是否相符的验证过程。目前，计算机及网络系统中常用的身份认证技术主要有：用户名/密码方式、智能卡认证、动态口令、生物特征认证等。其中能用于身份认证的生物特征必须具有（  ）。
A.唯一性和稳定性
B.唯一性和保密性
C.保密性和完整性
D.稳定性和完整性
试题解析与讨论：www.cnitpm.com/st/411269152.html
试题参考答案：A

试题8：

以下选项中，不属于生物识别方法的是（）
A、指纹识别
B、声音识别
C、虹膜识别
D、个人标记号识别

试题解析与讨论：www.cnitpm.com/st/284607440.html
试题参考答案：D

试题9： The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisons
B.image
C.preimage
D.solution
试题解析与讨论：www.cnitpm.com/st/4115223167.html
试题参考答案：A、D、C、B、C

试题10：

利用公开密钥算法进行数据加密时，采用的方法是（）
A、发送方用公开密钥加密，接收方用公开密钥解密
B、发送方用私有密钥加密，接收方用私有密钥解密
C、发送方用公开密钥加密，接收方用私有密钥解密
D、发送方用私有密钥加密，接收方用公开密钥解密

试题解析与讨论：www.cnitpm.com/st/2847616861.html
试题参考答案：C