分享到微信
信息安全工程师当天每日一练试题地址：www.cnitpm.com/exam/ExamDay.aspx?t1=6
往期信息安全工程师每日一练试题汇总：www.cnitpm.com/class/27/e6_1.html
信息安全工程师每日一练试题（2024/5/12）在线测试：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2024/5/12
点击查看：更多信息安全工程师习题与指导
信息安全工程师每日一练试题内容（2024/5/12）
试题1
从网络安全的角度看，以下原则中不属于网络安全防护体系在设计和实现时需要遵循的基本原则的是（ ）。
A.最小权限原则
B.纵深防御原则
C.安全性与代价平衡原则
D.Kerckhoffs原则查看答案
试题参考答案：D
试题2
特洛伊木马攻击的威胁类型属于（ ）。
A.旁路控制威胁
B.网络欺骗
C.植入威胁
D.授权侵犯威胁查看答案
试题参考答案：C
试题3
1949年，（）发表了题为《保密系统的通信理论》的文章，为密码技术的研究奠定了理论基础，由此密码学成了一门科学。
A.Shannon
B.Diffie
C.Hellman
D.Shamir查看答案
试题参考答案：A
试题4
在Linux系统中，可用（ ）工具检查进程使用的文件、TCP／UDP端口、用户等相关信息。
A．ps
B．lsof
C．top
D．pwck查看答案
试题参考答案：B
试题5
以下不属于网络安全控制技术的是（）
A、防火墙技术
B、访问控制
C、入侵检测技术
D、差错控制查看答案
试题参考答案：D
试题6
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’ type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
试题参考答案：A、D、C、B、A
试题7
以下关于公钥基础设施（PKI）的说法中，正确的是（）
A. PKI可以解决公钥可信性问题
B. PKI不能解决公钥可信性问题
C. PKI只能有政府来建立
D.PKI不提供数字证书查询服务查看答案
试题参考答案：A
试题8
下列关于数字签名的说法正确的是（）
A.数字签名是不可信的
B.数字签名容易被伪造
C.数字签名容易抵赖
D.数字签名不可改变查看答案
试题参考答案：D
试题9
SSL协议（安全套接层协议）是Netscape公司推出的一种安全通信协议，以下服务中，SSL协议不能提供的是（ ）。
A.用户和服务器的合法性认证服务
B.加密数据服务以隐藏被传输的数据
C.维护数据的完整性
D.基于UDP应用的安全保护查看答案
试题参考答案：D
试题10
以下关于隧道技术说法不正确的是（）
A、隧道技术可以用来解决TCP/IP协议的某种安全威胁问题
B、隧道技术的本质是用一种协议来传输另外一种协议
C、IPSec协议中不会使用隧道技术
D、虚拟专用网中可以采用隧道技术查看答案
试题参考答案：C
信管网订阅号
信管网视频号
信管网抖音号
温馨提示：因考试政策、内容不断变化与调整，信管网网站提供的以上信息仅供参考，如有异议，请以权威部门公布的内容为准！
信管网致力于为广大信管从业人员、爱好者、大学生提供专业、高质量的课程和服务，解决其考试证书、技能提升和就业的需求。
信管网软考课程由信管网依托10年专业软考教研倾力打造，教材和资料参编作者和资深讲师坐镇，通过深研历年考试出题规律与考试大纲，深挖核心知识与高频考点，为学员考试保驾护航。面授、直播＆录播，多种班型灵活学习，满足不同学员考证需求，降低课程学习难度，使学习效果事半功倍。
相关内容
| 发表评论 查看完整评论 | |
考试新手指南
学习计划攻略
精华备考资料
案例论文干货
章节模拟试题
免费试听课程
考试信息推送