信息安全工程师当天每日一练试题地址：www.cnitpm.com/exam/ExamDay.aspx?t1=6

往期信息安全工程师每日一练试题汇总：www.cnitpm.com/class/27/e6_1.html

信息安全工程师每日一练试题（2020/8/11）在线测试：www.cnitpm.com/exam/ExamDay.aspx?t1=6&day=2020/8/11

点击查看：更多信息安全工程师习题与指导

信息安全工程师每日一练试题内容（2020/8/11）

试题1：

IPv6是由互联网工程任务组(Internet Engineering Task Force，IETF)设计的下一代IP协议，IPv6采用的地址长度是：（）
A、 256位
B、 128位
C、 64位
D、 512位

试题解析与讨论：www.cnitpm.com/st/2678828745.html
试题参考答案：B

试题2：

程序设计和编码的问题引入的风险为：（）
A."网络钓鱼"
B."缓冲区溢出"
C."SYN 攻击"
D.暴力破解

试题解析与讨论：www.cnitpm.com/st/263372055.html
试题参考答案：B

试题3： 以下关于VPN的叙述中,正确的是（  ）。
A.VPN通过加密数据保证通过公网传输的信息即使被他人截获也不会泄露
B.VPN指用户自己租用线路,和公共网络物理上完全隔离的、安全的线路
C.VPN不能同时实现信息的认证和对身份的认证
D.VPN通过身份认证实现安全目标,不具数据加密功能
试题解析与讨论：www.cnitpm.com/st/3898424562.html
试题参考答案：A

试题4： An IS auditor should recommend the use of library control software to provide reasonable assurance that: 
A、program changes have been authorized. 
B、only thoroughly tested programs are released. 
C、modified programs are automatically moved to production. 
D、source and executable code integrity is maintained. 
试题解析与讨论：www.cnitpm.com/st/2976329600.html
试题参考答案：A

试题5： The use of object-oriented design and development techniques would MOST likely: 
A、facilitate the ability to reuse modules. 
B、improve system performance. 
C、enhance control effectiveness. 
D、speed up the system development life cycle. 
试题解析与讨论：www.cnitpm.com/st/295177699.html
试题参考答案：A

试题6：

以下哪个选项是缺乏适当的安全控制的表现（）
A.威胁
B.脆弱性
C.资产
D.影响

试题解析与讨论：www.cnitpm.com/st/26194728.html
试题参考答案：B

试题7： The computer security incident response team (CSIRT) of an organization disseminates detailed descriptions of recent threats. An IS auditor's GREATEST concern should be that the users might: 
A、use this information to launch attacks. 
B、forward the security alert. 
C、implement individual solutions. 
D、fail to understand the threat. 
试题解析与讨论：www.cnitpm.com/st/2982516746.html
试题参考答案：A

试题8：

SSL提供那些协议上的数据安全：（）
A、HTTP，FTP和TCP/IP
B、SKIP，SNMP和IP
C、UDP，VPN和SONET
D、PPTP,DMI 和RC4

试题解析与讨论：www.cnitpm.com/st/2718927803.html
试题参考答案：A

试题9： Much of the theoretical work in cryptography concerns cryptographic primitives algorithms with basic cryptographic properties - and their relationship to other cryptographic problems. More complicated cryptographic tools are then built from these basic primitives. Complex functionality in an application must be built in using combinations of these algorithms and assorted protocols. Such combinations are called（  1  ） and it is they which users actually encounter. Examples include PGP and its variants, ssh, SSL/TLS, all PKIs, （ 2 ）, etc For example, a （ 3 ） is function intended to be easy to compute but hard to invert.  
But note that, in a very general sense, for any cryptographic application to be secure (if based on computational feasibility assumptions) one-way functions must exist. However, if one-way functions exist, this implies that （ 4 ）≠NP. Since the P versus NP problem is currently unsolved, it is not known if one-way functions really do exist. For instance, if one way functions exist, then secure pseudorandom generators and secure pseudorandom functions exist.  Other （  5  ）include the encryption algorithms themselves, one-way permutations, trapdoor permutations, etc. 
（1）A. Password base   
B. cryptosystems    
C. Principles of cryptography   
D. Equipment system   
（2）A. Certification  
B. Digest Summary  
C. digital signatures  
D. Identification   
（3）A. Hash function  
B. one-way function   
C. Bidirectional function  
D. Power function  
（4）A. NPC  
B. N  
C. NP  
D. P   
（5）A. cryptographic primitives   
B. Principles of cryptography   
C. cryptosystems           
D. Password base
试题解析与讨论：www.cnitpm.com/st/2914512560.html
试题参考答案：B、C、B、D、A

试题10：

当曾经用于存放机密资料的PC在公开市场出售时（）
A.对磁盘进行消磁
B.对磁盘低级格式化
C.删除数据
D.对磁盘重整

试题解析与讨论：www.cnitpm.com/st/2608019128.html
试题参考答案：A