Quiz about Internet Security Quiz

Question 1

Interception, Manipulation, Impersonation and Repudiation are typical threats to security in communications.

Accepted Answer

True

Answer

False

Question 2

AES and DES are symmetric key encryption mechanisms.

Accepted Answer

True

Answer

False

Question 3

DES and AES are examples of block-based ciphering mechanisms.

Accepted Answer

True

Answer

False

Question 4

The DES (Data Encryption Standard) for symmetric encryption is obsolete (it is not used) respect to the AES (Advanced Encryption Standard).

Accepted Answer

True

Answer

False

Question 5

It is not possible to use the AES algorithm for digital signature.

Accepted Answer

True

Answer

False

Question 6

SubBytes, ShiftRows and MixColumns are examples of permutations of the RSA algorithm for symmetric encryption.

Accepted Answer

False

Answer

True

Question 7

ShiftRows, MixColumns and AddRoundKey are examples of permutations of the DES algorithm for symmetric encryption.

Accepted Answer

False

Answer

True

Question 8

Diffie-Hellman allows sharing a secret key through the communication channel in a secure manner.

Accepted Answer

True

Answer

False

Question 9

It is not useful ciphering with symmetric key and sending that key through a public key mechanism.

Accepted Answer

False

Answer

True

Question 10

An electronic signature is generated with the public part of the asymmetric key of the signer.

Accepted Answer

False

Answer

True

Question 11

In security, Hash algorithms are used to interchange symmetric keys.

Accepted Answer

False

Answer

True

Question 12

In asymmetric encryption, the secret part of the key may be deduced from the public part of the key.

Accepted Answer

False

Answer

True

Question 13

In symmetric encryption, the public part of the key may be encrypted with the secret part.

Accepted Answer

False

Answer

True

Question 14

In RSA, the secret part of the key is calculated directly from the two values of the public part, e and n.

Accepted Answer

False

Answer

True

Question 15

In the ElGamal mechanism for asymmetric encryption, we need the secret key in order to calculate the public key.

Accepted Answer

True

Answer

False

Question 16

Apart from other responsibilities, a Registration Authority (RA) verifies the information about the user to whom a certificate is to be given.

Accepted Answer

True

Answer

False

Question 17

In PKI, if we compare OCSP with SCVP, we can say that OCSP needs more complex clients.

Accepted Answer

True

Answer

False

Question 18

OCSP (Online Certificate Status Protocol) builds the certification path of a certificate in order to validate it.

Accepted Answer

False

Answer

True

Question 19

SCVP (Server-Based Certificate Validation Protocol) is better that OCSP (Online Certificate Status Protocol) in that it allows clients not to worry about constructing the certification path.

Accepted Answer

True

Answer

False

Question 20

SCVP (Server-Based Certificate Validation Protocol) builds the certification path of a certificate in order to validate it.

Accepted Answer

True

Answer

False

Question 21

To generate a trusted time stamp, a Time Stamping Authority uses Hash and PKI technology.

Accepted Answer

True

Answer

False

Question 22

In order to confirm that the time is correct, a Time Stamping Authority needs to keep a copy of the document to which a time stamp is assigned.

Accepted Answer

False

Answer

True

Question 23

The PKI distributed trust model does not use Certification Authorities.

Accepted Answer

True

Answer

False

Question 24

In a Plain trust model, the certificate of the CA is self-signed.

Accepted Answer

True

Answer

False

Question 25

In a Plain trust model, the certificate of the CA is self-signed.

Accepted Answer

True

Answer

False

Question 26

In the case of a hierarchical trust model, a X.509 certificate includes the signature of all the certification authorities of the tree.

Accepted Answer

False

Answer

True

Question 27

In PKI, a Plain trust model is as a Hierarchical one, but the Plain only has the root CA and a unique level of CAs.

Accepted Answer

False

Answer

True

Question 28

The PKI trust list model is controlled by the user.

Accepted Answer

True

Answer

False

Question 29

Without adding hybrid mechanisms, a user of a CA following the hierarchical model will not trust in a certificate coming from another CA following the plain model.

Accepted Answer

True

Answer

False

Question 30

The Bridge trust model only works with PKIs using the hierarchical model.

Accepted Answer

False

Answer

True

Question 31

The PKI bridge certification trust model is more efficient than the cross-certification one with respect to the number of needed certificates.

Accepted Answer

True

Answer

False

Question 32

The Bridge trust model implies adding a new Certification Authority.

Accepted Answer

True

Answer

False

Question 33

A X.509 certificate includes the signature of the owner of the certificate.

Accepted Answer

False

Answer

True

Question 34

A X.509 certificate includes the public key of its owner.

Accepted Answer

True

Answer

False

Question 35

A digital certificate includes the signature of the Certification Authority issuing that certificate.

Accepted Answer

True

Answer

False

Question 36

ASN.1 is a protocol to interchange X.509 certificates.

Accepted Answer

False

Answer

True

Question 37

ASN.1 is a data representation language used to formalize XML documents.

Accepted Answer

False

Answer

True

Question 38

ASN.1 is a data representation language used to formalize X.509 certificates that has been standardized by the IETF (Internet standard).

Accepted Answer

False

Answer

True

Question 39

ASN.1, standardized by ISO, is the data representation language used to formalize X.509 certificates.

Accepted Answer

True

Answer

False

Question 40

PKCS#7 (Public-Key Cryptography Standards 7) specifies how to send encrypted documents and their signatures. Some of its concepts are applied in the security of the e-mail.

Accepted Answer

True

Answer

False

Question 41

In a PKCS#7 message of type enveloped data, it is possible to sign over a hash or digest of the message.

Accepted Answer

False

Answer

True

Question 42

In a PKCS#7 message of type enveloped data, the signature algorithm should be RSA.

Accepted Answer

False

Answer

True

Question 43

In a PKCS#7 message of type signed data, it is not possible to sign over a hash or digest of the message.

Accepted Answer

False

Answer

True

Question 44

In a PKCS#7 message, the symmetric key is not sent, since it is supposed to be transfer by non-electronic means.

Accepted Answer

False

Answer

True

Question 45

There are PKCS#7 messages that define how to send a public key with a symmetric key.

Accepted Answer

False

Answer

True

Question 46

In PKCS#7, signedAndEnvelopedData is just adding signedData to EnvelopedData.

Accepted Answer

False

Answer

True

Question 47

PKCS#7 (Cryptographic Message Syntax) is one of the few (less than 20) PKCS rules.

Accepted Answer

True

Answer

False

Question 48

PKCS#7 (Cryptographic Message Syntax) is one of hundreds of PKCS rules.

Accepted Answer

False

Answer

True

Question 49

The security of HTTPS may be achieved adding security to TCP.

Accepted Answer

True

Answer

False

Question 50

There is a new version of the TLS protocol (TLSv1.3) that reduces the number of steps in the handshake phase.

Accepted Answer

True

Answer

False

Question 51

Version 1.3 of the TLS protocol (TLSv1.3) increases, with respect to the previous version, the number of phases in the initial handshake in order to improve the security level.

Accepted Answer

False

Answer

True

Question 52

In TLSv1.3, certificates are only mandatory for the server.

Accepted Answer

True

Answer

False

Question 53

In TLSv1.3, certificates are no longer used because the symmetric key is encrypted with Diffie-Hellman algorithms.

Accepted Answer

False

Answer

True

Question 54

TLSv1.3 supports 5 cipher suites. TLS_AES_128_GCM_SHA256 is an example of suite.

Accepted Answer

True

Answer

False

Question 55

TLSv1.3 supports 5 cipher suites. All of them are based on AES.

Accepted Answer

False

Answer

True

Question 56

TLSv1.3 specifies a handshake protocol phase that includes authentication and 'cipher suite' negotiation.

Accepted Answer

True

Answer

False

Question 57

In TLSv1.3, the symmetric key is encrypted with Diffie-Hellman algorithms.

Accepted Answer

True

Answer

False

Question 58

In TLSv1.3, 'cipher suite' negotiation is part of the handshake protocol.

Accepted Answer

True

Answer

False

Question 59

At least two of the 5 cipher suites in TLSv1.3 support stream encryption (not only block encryption).

Accepted Answer

False

Answer

True

Question 60

TLSv1.3 specifies a handshake protocol phase that includes authentication, but 'cipher suite' negotiation is left out of the protocol.

Accepted Answer

False

Answer

True

Question 61

QUIC ('A UDP-Based Multiplexed and Secure Transport') does not provide its own security mechanism. Therefore, we need to add a security mechanism over it.

Accepted Answer

False

Answer

True

Question 62

In order to have a secure protocol, we do not need to add a TLSv1.3 layer to a QUIC ('A UDP-Based Multiplexed and Secure Transport') implementation.

Accepted Answer

True

Answer

False

Question 63

QUIC standardizes how to combine it with any application protocol.

Accepted Answer

False

Answer

True

Question 64

One of the objectives in the design of QUIC has been to reduce the latency in the connection establishment phase.

Accepted Answer

True

Answer

False

Create a free account and access millions of resources

Popular Resources on Wayground

Discover more resources for Science