Quiz
FIT3031 - Network Security Exam Practice
Questions in this quiz (52)
1Which of the following algorithm is a symmetric encryption algorithm?
- ARSA
- BDiffie-Hellman
- CSHA-256
- DDES
2Which of the following attacks are active attacks?
- Replay
- Modification of Message
- Denial of Service- AReplay
- BModification of Message
- CDenial of Service
- DAll of the above
3Which of the following statement(s) regarding symmetric encryption is/are not true?
- AThe encryption key is the same as decryption key
- BSymmetric key encryption is slower than asymmetric key encryption
- CAES can be speed up using hardware module
- DAll of the above statements are not true
4Which of the following encryption algorithm is NOT used in 4G LTE?
- ASNOW 3G
- BAES
- C3DES
- DZUC
5Asymmetric encryption can solve the __________ problem(s) of symmetric encryption.
- AKey distribution
- BIntegrity
- CEfficiency
- DAll of the above
6Which of the following statement regarding SHA-1 is true?
- ACWI Amsterdam and Google had performed a collision attack against SHA-1, publishing two dissimilar PDF files which produce the same SHA-1 hash.
- BCWI Amsterdam and Google had invented a polynomial time algorithm to find two different integers which produce the same SHA-1 hash.
- CCWI Amsterdam and Google had performed a one-wayness attack against SHA-1, such that given any random 160-bit string, they can re-construct a PDF file which produces this SHA-1 hash.
- DCWI Amsterdam and Google had invented a polynomial time algorithm to find the input of the hash function x, for any given 160-bit integer y such that H(x)=y where H( ) is the SHA-1 function.
7The security of Diffie-Hellman Algorithm relies on the __________ problem.
- AFactorisation
- BSubset sum
- CDiscrete logarithm (DL)
- DLearning with errors (LWE)
8IPSec is used to secure the __________ layer.
- AApplication
- BTCP
- CNetwork Layer (IP)
- DPhysical
9X.509 is a standard of __________ .
- ADigital Signature
- BEmail Security
- CWireless LAN Security
- DDigital Security
10Which of the following activities are examples of Intrusion?
A) Cracking password
B) Distributing pirated software
C) Using e-banking service from a web browser in a library public computer during opening hours- ABoth A and B
- BBoth B and C
- CBoth A and C
- DAll of the above
11SSH is an encrypted version of ______
- AMIME
- BHTTP
- CTELNET
- DInternet Protocol
12Cloning of 4G SIM card can be done using __________ attack.
- AMan-in-the-middle
- BSQL Injection
- CDenial of Service
- DSide Channel
13Which of the following statement(s) describe(s) correctly the difference(s) between a virus and a worm?
- AA virus cannot be spread without a human action, but a worm has the capacity to travel without any human action.
- BA virus does not have the dormant phase, but a worm does have.
- CIn the propagation phase, a virus searches for other systems but a worm only searchers for other programs running within the same system.
- DAll of the above are correct
14Which of the following is/are the limitation(s) of a firewall?
- ACannot protect from attacks bypassing it
- BCannot protect against internal threat
- CAll of the above are limitations of a firewall
- DThere is no limitation of a firewall
15What are two security services provided by signcryption?
- AConfidentiality and Integrity
- BConfidentiality and Availability
- CIntegrity and Availability
16What is meant by "Access Control"?
- AA. The act of keeping unauthorised personel out of a system.
- BB. The act of allowing only authorised users into a system.
- CC. Authentication
- DAll of the above
17A loss of integrity is unauthorised modification of data during the communication.
- ATrue
- BFalse
18IPSec encapsulation mode provides protection to the entire IP packet.
- ATrue
- BFalse
19Machine learning based intrusion detection systems are likely to produce false positives
during traffic analysis.- ATrue
- BFalse
20DDoS attacks cannot be launched at the application layer.
- ATrue
- BFalse
21Which of the following is an example aspect of network security?
- AWireless security
- BPhysical security
- CHuman input errors
22Ciphertext-only capability means that: ______________.
- AOnly decryption can be performed on the ciphertexts
- BThe adversary can only access to the ciphertexts
- CThe adversary can only decrypt chosen ciphertexts
23PGP provides confidentiality through the use of ____________________.
- ASymmetric block encryption
- BRadix-64
- CDigital signatures
24In IPSec, authentication NOT applied to the entire original IP packet is ______________.
- ACipher mode
- BTransport mode
- CTunnel mode
25Which is FALSE regarding VPN?
- AVPN server should be placed in front of firewall if the firewall needs to inspect the packet payloud.
- BVPN server can only be established by IP security.
- CVPN can build multiple overlaying networks that share the same physical network.
26How does a TCP flooding attack occur?
- ATransport layer security (TLS) only secures communication between email servers and does not protect between client and server. This means all intermediate hops see plaintext. Hackers and government agencies can utilise this to their advantage. Google uses their key to encrypt emails and can decrypt the emails when requested.
- BDuring a TCP flood attack the attacker repeatedly send SYN packets to every port on the target server, often using fake IP addresses. These packets appear legitimate to the server as it tries to establish communication with a SYN-ACK packet. This basically overloads the server and it cannot establish communication due to the large amount of requests occurring.
- CA TCP flooding attack occurs by an attacker establishing a worm inside the victim system. This worm repeatedly attempts to connect to the system via SYN-ACK packets. These appear legeitimate as they come from within the host system and therefore bypass protection like firewalls and IPSec. This constant connections overload the systems resources causing it to reach capacity, and not be able to accept any legitimate connections.
27If the server does not allocate any resource to maintain the connections during the TCP
handshake, will the attack still be successful?- ATrue
- BFalse
28Domain Validated Certificates have to be verified offline?
- ATrue
- BFalse
29If Alice wants to use PGP, she is required to egister at a CA to get a certificate?
- ATrue
- BFalse
30In IPSec, transport mode provides protection to the entire IP packet?
- ATrue
- BFalse
31Attack surfaces in networks include both physical and wireless communication channels?
- ATrue
- BFalse
32If a certificate of a CA is self-signed, such a CA cannot be the root CA.
- ATrue
- BFalse
33Which statement(s) is/are true about the TOR network?
- AIf there are 5 intermediate Tor routers between the user and web server, the middle one knows neither the user IP nor the server IP.
- BFor per communication session, each TOR router will use its own key to encrypt the message.
- CTor can hide the IP address of the users from all intermediate Tor routers.
34Which statement(s) is/are true about the secure key distribution?
- AAlice can use public key of Bob to encrypt the private message encryption key in the presence of MITM attackers.
- BA security association is defined by the HMAC output that’s computed on the packets
- CTwo parties can run the DH key exchange protocol to generate the key after mutual verification of their identities.
35Which way(s) is/are not trusted for obtaining the CA’s certificate?
- AThe certificate is installed on your mobile phone’s operating system.
- BThe certificate is loaded from a USB, which is mailed from the CA service provider.
- CThe certificate is sent by a chat bot via an end-to-end encrypted messaging app.
36Which statement(s) is/are not true regarding the security of IPSec-based (Tunnel Mode) VPN service?
- AIPSec-based VPN reveals the IP address of the sender host.
- BIPSec-based VPN prevents from traffic analysis.
- CIPSec-based VPN reveals the IP addresses of the gateways which establish the tunnel.
37In PGP, the signature of message is generated before compression. Which statement(s) is/are the reason of doing this?
- AThe signature cannot be applied on the compressed message.
- BThe compression algorithm might not be deterministic.
- CThe compression algorithm can reduce the redundancy of the message.
38Why is the checksum in the header field of an IP packet insufficient for offering security?
- AChecksum is not encrypted
- BChecksum only checks some parts of the payload
- CChecksum itself can be changed and forged
39Which statement/s is(are) not true about the Anti-Replay service of IPSec?
- AThe sequence number of packets cannot be a negative number.
- BThe sliding window will be moved based on a time parameter defined in advance, e.g., after 1 minute, the window is advanced.
- CThe receiver will accept the packets with a sequence number within the current sliding window and mark them as “received”.
40Which of the following is/are a service provided by PGP email encryption?
- AAllow content filtering on encrypted emails
- BEnsure the confidentiality of all email fields
- CProvide a distributed key management service
41What is the ultimate goal of CONFidentiality in network applications?
- AThe encryption and decryption key remains secret
- BBoth parties in a connection are confident about the security of their communication
- CThe message m exchanged between two parties remains secret during the transmission
42It is sufficient to rely solely on transport layer security?
- ATrue
- BFalse
43What is a countermeasure to TCP flooding attacks?
- AFirewalls
- BRecycle list of half-opened connections
- CSYN cookies
- DAllocate backlog memory to a large amount
- EEncryption of IP header
- FSliding window replay mechanism
44We generate a signature prior to compression so the signature does not depend on the compression algorithm.
- ATrue
- BFalse
45Why does compression take place before encryption in PGP?
- ACompression takes place before encryption to reduce the size of the message.
- BCompression is done prior to encryption to reduce redundancy. Compressing after encryption would mean the encryption would also have to be compressed, which would lower efficiency and speed.
- CCompression is done prior to encryption to increase the validity of the encryption.
46What are some limitations of PGP?
- AMisuse
- BLeakage
- CNo forward secrecy
- DLack of non-repudiation and authentication in compromised scenarios
- ELack of encryption
- FHeaders can be targeted by hackers to reveal IP addresses
47Email service providers (eg. gmail) do not deploy end-to-end email encryption because it is too expensive?
- ATrue
- BFalse
48TLS (transport layer security) hides the IP address of clients?
- ATrue
- BFalse
49What are some services offered by IPSec?
- AMessages Authentication (Integrity)
- BKey Management (Authenticity)
- CAnti-replay (Availability)
50The Internet Key Exchange (IKE) used in IPSec is based off of the Diffie-Hellman key exchange method?
- ATrue
- BFalse
51What is true about ESP tunnel mode?
- AESP tunnel mode encrypts the IP paylod but not the IP header
- BESP tunnel mode allows for traffic analysis
- CESP tunnel mode disables traffic analysis
- DESP tunnel mode authenticates the IP payloud and selected portions of the IP header
52What is true about AH transport mode?
- AAuthenticates entire IP packet
- BEncrypts IP payload
- CEncypts entire IP packet
- DAuthenticates IP payloud and selected portions of the IP header
Information
- Description
- Practice exam questions for FIT3031 Network Security Exam
- Author
- Nicholas Bagnall
- Language
- English
- Views
- 366
- Tags
- Rating
- No ratings yet Rate this quiz