分享到微信
信息安全工程師當(dāng)天每日一練試題地址：www.xomuzic.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：www.xomuzic.com/class/27/e6_1.html
信息安全工程師每日一練試題（2023/6/7）在線測(cè)試：www.xomuzic.com/exam/ExamDay.aspx?t1=6&day=2023/6/7
點(diǎn)擊查看：更多信息安全工程師習(xí)題與指導(dǎo)
信息安全工程師每日一練試題內(nèi)容（2023/6/7）
試題1
S/key口令是一種一次性口令生成方案，它可以對(duì)抗（ ）。
A.惡意代碼攻擊
B.暴力分析攻擊
C.重放攻擊
D.協(xié)議分析攻擊查看答案
試題參考答案：C
試題2
工業(yè)控制系統(tǒng)是由各種自動(dòng)化控制組件和實(shí)時(shí)數(shù)據(jù)采集、監(jiān)測(cè)的過(guò)程控制組件共同構(gòu)成，工業(yè)控制系統(tǒng)安全面臨的主要威脅不包括（）
A.系統(tǒng)漏洞
B.網(wǎng)絡(luò)攻擊
C.設(shè)備故障
D.病毒破壞查看答案
試題參考答案：C
試題3
Kerberos是一種常用的身份認(rèn)證協(xié)議,它采用的加密算法是（ ）。
A.Elgamal
B.DES
C.MD5
D.RSA查看答案
試題參考答案：B
試題4
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
試題參考答案：A、D、C、B、A
試題5
SMTP是一種提供可靠有效的電子郵件傳輸?shù)膮f(xié)議，采用客戶服務(wù)器的工作方式，在傳輸層使用TCP協(xié)議進(jìn)行傳輸。SMTP發(fā)送協(xié)議中，傳送報(bào)文文本的指令是（） 。
A.HELO
B.HELP
C.SEND
D.DATA查看答案
試題參考答案：D
試題6
以下關(guān)于網(wǎng)絡(luò)釣魚(yú)的說(shuō)法中，不正確的是（）
A、網(wǎng)絡(luò)釣魚(yú)融合了偽裝、欺騙等多種攻擊方式
B、網(wǎng)絡(luò)釣魚(yú)與Web服務(wù)沒(méi)有關(guān)系
C、典型的網(wǎng)絡(luò)釣魚(yú)攻擊都將被攻擊者引誘到一個(gè)通過(guò)精心設(shè)計(jì)的釣魚(yú)網(wǎng)站上
D、網(wǎng)絡(luò)釣魚(yú)是“社會(huì)工程攻擊”是一種形式查看答案
試題參考答案：B
試題7
《計(jì)算機(jī)信息系統(tǒng)安全保護(hù)等級(jí)劃分準(zhǔn)則》中規(guī)定了計(jì)算機(jī)系統(tǒng)安全保護(hù)能力的五個(gè)等級(jí)，其中要求計(jì)算機(jī)信息系統(tǒng)可信計(jì)算機(jī)滿足訪問(wèn)監(jiān)控器需求的是（）
A.系統(tǒng)審計(jì)保護(hù)級(jí)
B.安全標(biāo)記保護(hù)級(jí)
C.結(jié)構(gòu)化保護(hù)級(jí)
D.訪問(wèn)驗(yàn)證保護(hù)級(jí)查看答案
試題參考答案：D
試題8
數(shù)字證書(shū)是一種由一個(gè)可信任的權(quán)威機(jī)構(gòu)簽署的信息集合。PKI中的X. 509數(shù)字證書(shū)的內(nèi)容不包括（ ）。
A.版本號(hào)
B.簽名算法標(biāo)識(shí)
C.證書(shū)持有者的公鑰信息
D.加密算法標(biāo)識(shí)查看答案
試題參考答案：D
試題9
由于Internet規(guī)模太大，常把它劃分成許多小的自治系統(tǒng)，通常把自治系統(tǒng)內(nèi)部的路由協(xié)議稱為內(nèi)部網(wǎng)關(guān)協(xié)議，自治系統(tǒng)之間的協(xié)議稱為外部網(wǎng)關(guān)協(xié)議。以下屬于外部網(wǎng)關(guān)協(xié)議的是（）。
A.RIP
B.OSPF
C.BGP
D.UDP查看答案
試題參考答案：C
試題10
下面關(guān)于跨站攻擊描述不正確的是（）
A.跨站腳本攻擊指的是惡意攻擊者向Web頁(yè)面里插入惡意的Html代碼
B.跨站腳本攻擊簡(jiǎn)稱XSS
C.跨站腳本攻擊也可稱作CSS
D.跨站腳本攻擊是主動(dòng)攻擊查看答案
試題參考答案：D
信管網(wǎng)訂閱號(hào)
信管網(wǎng)視頻號(hào)
信管網(wǎng)抖音號(hào)
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請(qǐng)以權(quán)威部門公布的內(nèi)容為準(zhǔn)！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛(ài)好者、大學(xué)生提供專業(yè)、高質(zhì)量的課程和服務(wù)，解決其考試證書(shū)、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專業(yè)軟考教研傾力打造，教材和資料參編作者和資深講師坐鎮(zhèn)，通過(guò)深研歷年考試出題規(guī)律與考試大綱，深挖核心知識(shí)與高頻考點(diǎn)，為學(xué)員考試保駕護(hù)航。面授、直播＆錄播，多種班型靈活學(xué)習(xí)，滿足不同學(xué)員考證需求，降低課程學(xué)習(xí)難度，使學(xué)習(xí)效果事半功倍。
相關(guān)內(nèi)容
| 發(fā)表評(píng)論 查看完整評(píng)論 | |
考試新手指南
學(xué)習(xí)計(jì)劃攻略
精華備考資料
案例論文干貨
章節(jié)模擬試題
免費(fèi)試聽(tīng)課程
考試信息推送