Online tests with answers and diagrams on software security

Lecture



INFORMATION SECURITY TOOLS FOR COMPUTER SYSTEMS. CRYPTOGRAPHIC METHODS OF INFORMATION PROTECTION

1. Integrity control of data transmitted over networks is provided by means of …

  • digital signature
  • data authentication
  • event auditing
  • firewalling

Online tests with answers and diagrams on software security

2. The transformation process in which the source text, also called plaintext, is replaced with modified text is called

  • encryption
  • decryption
  • transformation
  • distortion
  • encoding
  • hashing

Online tests with answers and diagrams on software security

3. The process in which encrypted text is converted back into the original text is called …

  • encryption
  • decryption
  • transformation
  • distortion

4. The process in which encrypted text is converted back into the original text is called …

  • encryption
  • decryption
  • transformation
  • distortion

5. The information needed to freely encrypt and decrypt texts is called …

  • key
  • cipher
  • code
  • password

6. The characteristic of a cipher that determines its resistance to being broken without knowledge of the key is called …

  • cryptographic strength
  • password
  • authenticator
  • encryptor

7. Asymmetric encryption uses … for encryption and decryption.

  • one public key and one private key
  • one public key
  • one private key
  • the same key
  • two public keys
  • two private keys

8. Asymmetric encryption uses a … key for encryption.

  • public
  • private

Online tests with answers and diagrams on software security

Online tests with answers and diagrams on software security

9. Asymmetric encryption uses a … key for decryption.

  • private
  • public

10. In symmetric encryption, … are used for encryption and decryption.

  • two keys of different lengths
  • two keys with different values
  • the same key
  • two public keys
  • two private keys
  • one public key and one private key

11. A relatively small amount of additional authenticating information transmitted together with the signed text is called …

  • private encryption key
  • digital signature
  • virus signature mask
  • public encryption key

12. A cryptosystem includes …

  • an encryption algorithm
  • a set of keys used for encryption
  • a key management system
  • antivirus software
  • a firewall

13. The security mechanism that is a strong psychological deterrent, reminding potential intruders of the inevitability of punishment for unauthorized actions, and reminding users of the possible consequences of critical mistakes, is …

  • logging and auditing
  • authentication
  • identification
  • VPN
  • firewall

14. The objectives of a cryptosystem are: …

  • ensuring confidentiality
  • ensuring data integrity
  • authentication of data and its sources
  • firewalling
  • virus protection

15. The functions of cryptographic key management are: …

  • generation
  • storage
  • distribution
  • study
  • destruction

ANTIVIRUS SOFTWARE

16. The main property of computer viruses lies in their ability to …

  • spontaneously embed themselves into various objects of the operating system
  • violate information security
  • infect those around them
  • destroy data and the computer

17. Viruses that infect files — documents and spreadsheets of office applications — are called …

  • file viruses
  • network viruses
  • macro viruses
  • boot viruses

18. Viruses that infect files — documents and spreadsheets of office applications — are called …-viruses

  • macroviruses
  • microviruses
  • peakviruses
  • gigaviruses

19. Self-encryption and polymorphism are used to …

  • enable the virus to self-replicate
  • maximize the difficulty of virus detection
  • decrypt the virus body
  • conceal the actions of the antivirus program

20. One of the most effective ways of fighting viruses is …

  • using antivirus software
  • using the UNIX operating system
  • restricting user access to the computer
  • encrypting data

21. An antivirus program based on computing checksums for files/system sectors present on disk is called …

  • immunizer
  • blocker
  • scanner
  • CRC scanner

22. An antivirus program that intercepts «virus-dangerous» situations and reports them to the user is called …

  • immunizer
  • blocker
  • scanner
  • CRC scanner

Online tests with answers and diagrams on software security

23. A computer virus is …

  • a polymorphic generator
  • a hidden administration utility
  • a macro virus
  • a logic bomb

24. A polymorphic generator performs …

  • a search for new viruses
  • removal of the antivirus program
  • encryption of the virus body
  • replication of the virus

25. A polymorphic generator performs … of the virus body.

  • encryption
  • hashing

26. Hard-to-detect viruses that have no signatures — that is, contain no permanent section of code — are called …

  • polymorphic viruses
  • stealth viruses
  • macro viruses
  • virus constructors

27. Hard-to-detect viruses that have no signatures — that is, contain no permanent section of code — are called …-viruses

  • polymorphic
  • macro
  • resident

INFORMATION PROTECTION IN A PERSONAL COMPUTER (PC)

28. Identification and authentication are used to …

  • register security events
  • detect attempts at unauthorized access
  • ensure data integrity
  • restrict access of random and unauthorized subjects of an information system to its objects

29. Analysis of accumulated information, carried out promptly, in real time, or periodically, is called – …

  • Audit
  • authorization
  • authentification
  • identification

30. Analysis of accumulated information, carried out promptly, in real time, or periodically, is called …

  • audit
  • identification
  • authentication
  • encryption

31. Real-time auditing with automatic response to detected abnormal situations is called …

  • active
  • passive
  • operational
  • urgent
  • automatic

32. Real-time auditing with automatic response to detected abnormal situations is called …

  • active
  • operational
  • urgent
  • automatic
  • passive

33. Access control based on matching confidentiality labels of information contained in objects (files, folders, images) against the official authorization (clearance) of a subject to access information of the corresponding confidentiality level is called ...

  • mandatory
  • forced
  • statistical
  • discretionary

34. Access control representing the delineation of access between named subjects and named objects is called …

  • discretionary
  • mandatory
  • forced
  • statistical

35. Authentication that provides protection only against unauthorized actions in systems where an intruder cannot read the authentication information during a work session is called …

  • static
  • robust
  • permanent
  • variable

36. An example of a … authentication tool is traditional permanent passwords.

  • static
  • robust
  • permanent
  • variable

Online tests with answers and diagrams on software security

37. Authentication that uses dynamic authentication data that changes with each work session is called …

  • robust
  • static
  • permanent
  • variable

38. Implementations of … authentication are systems using one-time passwords and digital signatures.

  • robust
  • static
  • permanent
  • variable

39. Authentication that provides protection against attacks in which an attacker can intercept authentication information and use it in subsequent work sessions is called …

  • robust
  • static
  • permanent
  • variable

40. Authentication that provides identification of each block of transmitted data, protecting it from unauthorized modification or insertion, is called …

  • permanent
  • robust
  • static
  • variable

41. An example implementation of … authentication is the use of digital signature generation algorithms for every bit of transmitted information.

  • permanent
  • temporal

42. An example implementation of … authentication is the use of digital signature generation algorithms for every bit of transmitted information

  • permanent
  • robust
  • static
  • variable

43. A chronologically ordered collection of records of the results of the activity of system subjects is called a … log.

  • registration
  • hidden

INFORMATION PROTECTION IN COMPUTER NETWORKS

Online tests with answers and diagrams on software security

44. Correspondence between OSI model layers and firewall types.

Application Application-level gateway, expert-level firewall
Session Circuit-level gateway
Network Packet-filtering firewall

45. Order of firewall types in descending order (from highest to lowest) of the corresponding OSI model layers: 1: Application-level gateway, 2: Circuit-level gateway, 3: Packet-filtering firewall

  • 1) 1,2,3
  • 2) 2,3,1
  • 3) 3,2,1
  • 4) 2,3,1
  • 5) 1,3,2
  • 6) 3,2,1

46. Order of firewall types in descending order (from highest to lowest) of the corresponding OSI model layers: 1: Expert-level firewall, 2: Circuit-level gateway, 3: Packet-filtering firewall

  • 1) 1,2,3
  • 2) 2,3,1
  • 3) 3,2,1
  • 4) 2,3,1
  • 5) 1,3,2
  • 6) 3,2,1

47. Order of firewall types in ascending order (from lowest to highest) of the corresponding OSI model layers: 1: Packet-filtering firewall, 2: Circuit-level gateway, 3: Expert-level firewall

  • 1) 1,2,3
  • 2) 2,3,1
  • 3) 3,2,1
  • 4) 2,3,1
  • 5) 1,3,2
  • 6) 3,2,1

48. Order of firewall types in ascending order (from lowest to highest) of the corresponding OSI model layers: 1: Packet-filtering firewall, 2: Circuit-level gateway, 3: Application-level gateway

  • 1) 1,2,3
  • 2) 2,3,1
  • 3) 3,2,1
  • 4) 2,3,1
  • 5) 1,3,2
  • 6) 3,2,1

49. A software or hardware-software system that monitors information flows entering and/or leaving an information system, and protects the information system by filtering information …

  • firewall
  • immunizer
  • antivirus program
  • CRC scanner

50. A software or hardware-software system that monitors information flows entering and/or leaving an information system, and protects the information system by filtering information …

  • firewall
  • immunizer
  • hidden administration utility
  • CRC scanner

51. A software or hardware-software system that monitors information flows entering and/or leaving an information system, and protects the information system by filtering information …

  • firewall (brandmauer)
  • immunizer
  • antivirus program
  • CRC scanner

Online tests with answers and diagrams on software security

Online tests with answers and diagrams on software security

52. …-level gateways control the admissibility of a communication session.

  • Session
  • Data link
  • Application

53. …-level gateways monitor the acknowledgment of the connection between an authorized client and an external host (and vice versa), determining whether the requested communication session is permissible.

  • Session
  • Data link
  • Application

54. …-level gateways inspect the content of every packet passing through the gateway and can filter individual types of commands or information in the application-layer protocols they are assigned to service.

  • Application
  • Data link
  • Session

55. …-level gateways monitor the acknowledgment of the connection between an authorized client and an external host (and vice versa), determining whether the requested communication session is permissible.

  • Session
  • Application
  • Data link
  • Physical

56. …-level gateways inspect the content of every packet passing through the gateway and can filter individual types of commands or information in the application-layer protocols they are assigned to service.

  • Session
  • Application
  • Data link
  • Physical

57. 4 types of firewalls: …

  • packet-filtering firewalls
  • circuit-level gateways
  • application-level gateways
  • expert-level firewalls
  • physical-level gateways
  • data-link-level firewalls

58. …-level firewalls combine elements of all three of the other categories.

  • Expert
  • Professional
  • Basic

59. Virtual private networks include the following security services: …

  • screening
  • encryption
  • tunneling
  • auditing
  • logging and access control
  • digital signature.

60. To implement VPN technology, all computers with Internet access have VPN … installed, which process the IP packets transmitted over the networks.

  • VPN agents
  • VPN servers
  • VPN clients
  • VPN connections

Online tests with answers and diagrams on software security

61. The sequence of actions performed by a VPN agent before sending an IP packet:

  • 1: the recipient's IP address is analyzed, and depending on this address the algorithm for protecting the packet is selected
  • 2: the packet's message authentication code (imitovstavka), which ensures integrity control of the transmitted data, is computed and added to the packet
  • 3: the packet is encrypted
  • 4: a new packet header is formed, in which the address of its VPN agent is specified instead of the recipient's address (packet encapsulation)

62. The sequence of actions performed by a VPN agent upon receiving an IP packet: 1: information about the VPN agent of the packet's sender is extracted from the packet header, 2: cryptographic algorithms and keys are selected according to the settings, after which the packet is decrypted and its integrity is verified, 3: the packet in its original form is sent to the actual recipient over the local network

  • 1) 1,2,3
  • 2) 2,3,1
  • 3) 3,2,1
  • 4) 2,3,1
  • 5) 1,3,2
  • 6) 3,2,1

Online tests with answers and diagrams on software security

63. Correspondence between OSI model layers and functions:

Application User applications, message creation
Transport Delivery of data between programs on the network
Network Addressing and routing
Data link Network hardware and its drivers

64. Layers of the TCP/IP model in descending order (from highest to lowest):

  • 1: Application
  • 2: Transport
  • 3: Network
  • 4: Data link

65. Layers of the TCP/IP model in ascending order (from lowest to highest):

  • 1: Data link
  • 2: Network
  • 3: Transport
  • 4: Application

66. Functions of the TCP/IP model in descending order of layer (from highest to lowest):

  • 1: User applications, message creation
  • 2: Delivery of data between programs on the network
  • 3: Addressing and routing
  • 4: Network hardware and its drivers

67. Functions of the TCP/IP model in ascending order of layer (from lowest to highest):

  • 1: Network hardware and its drivers
  • 2: Addressing and routing
  • 3: Delivery of data between programs on the network
  • 4: User applications, message creation

68. The layer of the TCP/IP model that determines the way user applications communicate is the – …

  • 1) application
  • 2: Network
  • 3: Transport

69. The layer of the TCP/IP model that allows network applications to receive messages over strictly defined channels with specific parameters is the – …

  • 1 transport
  • 2: Network
  • 3: Transport
  • 4: Application

70. At the … layer of the TCP/IP model, the addresses of computers connected to the network are determined, logical networks and subnets are allocated, and routing between them is implemented.

  • 1 network
  • 2: Transport
  • 3: Application

71. At the … layer of the TCP/IP model, the addressing of the physical interfaces of network devices, such as network adapters, is determined.

  • 1 data link
  • 2: Transport
  • 3: Application

72. The programs that control physical network devices, the so-called drivers, belong to the … layer of the TCP/IP model.

  • 1) data link
  • 2: Transport
  • 3: Application

73. Correspondence between components of the TCP/IP protocol suite:

  • IP internetworking protocol providing addressing across networks
  • ICMP internet control message protocol
  • ARP address resolution protocol, which converts logical network addresses into hardware addresses
  • RARP address resolution protocol, which converts hardware network addresses into logical addresses
  • UDP user datagram protocol
  • TCP transmission control protocol
  • all correct *

74. The internetworking protocol that provides addressing across networks (Latin-letter abbreviation) is …

  • IP
  • TCP
  • UPD

75. The internet control message protocol (Latin-letter abbreviation) …

  • ICMP
  • TCP
  • UPD
  • IMAP

Online tests with answers and diagrams on software security

76. The address resolution protocol that converts logical network addresses into hardware addresses (Latin-letter abbreviation) …

  • ARP
  • TCP
  • UPD
  • IMAP

77. The address resolution protocol that converts hardware network addresses into logical addresses (Latin-letter abbreviation) …

  • TCP
  • UDP
  • RARP

78. The user datagram protocol (Latin-letter abbreviation) …

  • TCP
  • UDP
  • RARP

79. The transmission control protocol (Latin-letter abbreviation) …

  • TCP
  • UDP
  • RARP

80. The internetworking protocol that provides addressing across networks is …

  • IP
  • ICMP
  • ARP
  • RARP
  • UDP
  • TCP

81. The internet control message protocol …

  • ICMP
  • IP
  • ARP
  • RARP
  • UDP
  • TCP

82. The address resolution protocol that converts logical network addresses into hardware addresses …

  • ARP
  • IP
  • ICMP
  • RARP
  • UDP
  • TCP

83. The address resolution protocol that converts hardware network addresses into logical addresses is …

  • RARP
  • IP
  • ICMP
  • ARP
  • UDP
  • TCP

84. The user datagram protocol …

  • UDP
  • IP
  • ICMP
  • ARP
  • RARP
  • TCP

85. The transmission control protocol …

  • TCP
  • IP
  • ICMP
  • ARP
  • RARP
  • UDP

Comments

To leave a comment

If you have any suggestion, idea, thanks or comment, feel free to write. We really value feedback and are glad to hear your opinion.
To reply

Lectures and tutorial on "information security - Cryptography and Cryptanalysis. Steganography. Information protection"

Terms: information security - Cryptography and Cryptanalysis. Steganography. Information protection