CNS quiz1

What is a phishing attack and how does it work?

• A phishing attack is a deceptive attempt to obtain sensitive information by impersonating a legitimate entity, often through emails or fake websites.

• A phishing attack is a type of malware that infects computers through software updates.

• A phishing attack is a legitimate marketing strategy to collect user data.

• A phishing attack is a method to enhance cybersecurity by monitoring user behavior.

Explain the concept of TCP session hijacking.

• TCP session hijacking refers to the process of shutting down an active TCP session.

• TCP session hijacking is a method of encrypting data packets for security.

• TCP session hijacking involves creating a new TCP session from scratch.

• TCP session hijacking is a method of taking control of an active TCP session by intercepting and injecting packets.

What are the main principles of block cipher design?

• Compression, encoding, and decoding

• The main principles of block cipher design are confusion, diffusion, and key schedules.

• Encryption, decryption, and authentication

• Substitution, transposition, and hashing

What are the essential features of a standard block cipher's decryption process?

• Decryption in block ciphers is performed using the same key as encryption, with no changes to the algorithm.

• Block ciphers decrypt data in fixed-size blocks, applying the inverse of the encryption transformations.

• A standard block cipher uses a different key for decryption than for encryption.

• Decryption in traditional block ciphers involves multiple rounds of inverse substitution and permutation, similar to the encryption process.

What are the common consequences of SQL injection attacks and what measures can be taken to mitigate them?

• SQL injection attacks can lead to unauthorized access to sensitive data, data loss, and corruption. Mitigation measures include using web application firewalls, regular security testing, and keeping software up to date.

• SQL injection attacks are harmless and do not affect applications.

• SQL injection attacks can be prevented by using only stored procedures.

• SQL injection attacks improve the performance of database systems.

What are the key differences between symmetric and asymmetric encryption?

• Symmetric encryption uses the same key for both encryption and decryption, while asymmetric encryption uses a pair of keys (public and private).

• Symmetric encryption is slower than asymmetric encryption.

• Symmetric encryption requires more computational power than asymmetric encryption.

• Asymmetric encryption is used for data at rest, while symmetric encryption is used for data in transit.