信息安全工程師當天每日一練試題地址：www.jazzmuze.com/exam/ExamDay.aspx?t1=6

往期信息安全工程師每日一練試題匯總：www.jazzmuze.com/class/27/e6_1.html

信息安全工程師每日一練試題（2020/8/11）在線測試：www.jazzmuze.com/exam/ExamDay.aspx?t1=6&day=2020/8/11

點擊查看：更多信息安全工程師習題與指導

信息安全工程師每日一練試題內容（2020/8/11）

試題1：

IPv6是由互聯(lián)網工程任務組(Internet Engineering Task Force，IETF)設計的下一代IP協(xié)議，IPv6采用的地址長度是：（）
A、 256位
B、 128位
C、 64位
D、 512位

試題解析與討論：www.jazzmuze.com/st/2678828745.html
試題參考答案：B

試題2：

程序設計和編碼的問題引入的風險為：（）
A."網絡釣魚"
B."緩沖區(qū)溢出"
C."SYN 攻擊"
D.暴力破解

試題解析與討論：www.jazzmuze.com/st/263372055.html
試題參考答案：B

試題3： 以下關于VPN的敘述中,正確的是（  ）。
A.VPN通過加密數(shù)據保證通過公網傳輸?shù)男畔⒓词贡凰私孬@也不會泄露
B.VPN指用戶自己租用線路,和公共網絡物理上完全隔離的、安全的線路
C.VPN不能同時實現(xiàn)信息的認證和對身份的認證
D.VPN通過身份認證實現(xiàn)安全目標,不具數(shù)據加密功能
試題解析與討論：www.jazzmuze.com/st/3898424562.html
試題參考答案：A

試題4： An IS auditor should recommend the use of library control software to provide reasonable assurance that: 
A、program changes have been authorized. 
B、only thoroughly tested programs are released. 
C、modified programs are automatically moved to production. 
D、source and executable code integrity is maintained. 
試題解析與討論：www.jazzmuze.com/st/2976329600.html
試題參考答案：A

試題5： The use of object-oriented design and development techniques would MOST likely: 
A、facilitate the ability to reuse modules. 
B、improve system performance. 
C、enhance control effectiveness. 
D、speed up the system development life cycle. 
試題解析與討論：www.jazzmuze.com/st/295177699.html
試題參考答案：A

試題6：

以下哪個選項是缺乏適當?shù)陌踩刂频谋憩F(xiàn)（）
A.威脅
B.脆弱性
C.資產
D.影響

試題解析與討論：www.jazzmuze.com/st/26194728.html
試題參考答案：B

試題7： The computer security incident response team (CSIRT) of an organization disseminates detailed descriptions of recent threats. An IS auditor's GREATEST concern should be that the users might: 
A、use this information to launch attacks. 
B、forward the security alert. 
C、implement individual solutions. 
D、fail to understand the threat. 
試題解析與討論：www.jazzmuze.com/st/2982516746.html
試題參考答案：A

試題8：

SSL提供那些協(xié)議上的數(shù)據安全：（）
A、HTTP，F(xiàn)TP和TCP/IP
B、SKIP，SNMP和IP
C、UDP，VPN和SONET
D、PPTP,DMI 和RC4

試題解析與討論：www.jazzmuze.com/st/2718927803.html
試題參考答案：A

試題9： Much of the theoretical work in cryptography concerns cryptographic primitives algorithms with basic cryptographic properties - and their relationship to other cryptographic problems. More complicated cryptographic tools are then built from these basic primitives. Complex functionality in an application must be built in using combinations of these algorithms and assorted protocols. Such combinations are called（  1  ） and it is they which users actually encounter. Examples include PGP and its variants, ssh, SSL/TLS, all PKIs, （ 2 ）, etc For example, a （ 3 ） is function intended to be easy to compute but hard to invert.  
But note that, in a very general sense, for any cryptographic application to be secure (if based on computational feasibility assumptions) one-way functions must exist. However, if one-way functions exist, this implies that （ 4 ）≠NP. Since the P versus NP problem is currently unsolved, it is not known if one-way functions really do exist. For instance, if one way functions exist, then secure pseudorandom generators and secure pseudorandom functions exist.  Other （  5  ）include the encryption algorithms themselves, one-way permutations, trapdoor permutations, etc. 
（1）A. Password base   
B. cryptosystems    
C. Principles of cryptography   
D. Equipment system   
（2）A. Certification  
B. Digest Summary  
C. digital signatures  
D. Identification   
（3）A. Hash function  
B. one-way function   
C. Bidirectional function  
D. Power function  
（4）A. NPC  
B. N  
C. NP  
D. P   
（5）A. cryptographic primitives   
B. Principles of cryptography   
C. cryptosystems           
D. Password base
試題解析與討論：www.jazzmuze.com/st/2914512560.html
試題參考答案：B、C、B、D、A

試題10：

當曾經用于存放機密資料的PC在公開市場出售時（）
A.對磁盤進行消磁
B.對磁盤低級格式化
C.刪除數(shù)據
D.對磁盤重整

試題解析與討論：www.jazzmuze.com/st/2608019128.html
試題參考答案：A