分享到微信
信息安全工程師當(dāng)天每日一練試題地址：www.xcpkj.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：www.xcpkj.com/class/27/e6_1.html
信息安全工程師每日一練試題（2023/3/3）在線測(cè)試：www.xcpkj.com/exam/ExamDay.aspx?t1=6&day=2023/3/3
點(diǎn)擊查看：更多信息安全工程師習(xí)題與指導(dǎo)
信息安全工程師每日一練試題內(nèi)容（2023/3/3）
試題1
計(jì)算機(jī)取證是將計(jì)算機(jī)調(diào)查和分析技術(shù)應(yīng)用于對(duì)潛在的、有法律效應(yīng)的確定和提取。以下關(guān)于計(jì)算機(jī)取證的描述中，錯(cuò)誤的是（）
A、計(jì)算機(jī)取證包括對(duì)以磁介質(zhì)編碼信息方式存儲(chǔ)的計(jì)算機(jī)證據(jù)的提取和歸檔
B、計(jì)算機(jī)取證圍繞電子證據(jù)進(jìn)行，電子證據(jù)具有高科技性等特點(diǎn)
C、計(jì)算機(jī)取證包括保護(hù)目標(biāo)計(jì)算機(jī)系統(tǒng)，確定收集和保存電子證據(jù)，必須在開計(jì)算機(jī)的狀態(tài)下進(jìn)行
D、計(jì)算機(jī)取證是一門在犯罪進(jìn)行過程中或之后收集證據(jù)查看答案
試題參考答案：C
試題解析與討論：www.xcpkj.com/st/284618752.html
試題2
文件型病毒不能感染的文件類型是（ ）。
A.SYS型
B.EXE類型
C.COM型
D.HTML型查看答案
試題參考答案：D
試題解析與討論：www.xcpkj.com/st/389728017.html
試題3
工業(yè)控制系統(tǒng)是由各種自動(dòng)化控制組件和實(shí)時(shí)數(shù)據(jù)采集、監(jiān)測(cè)的過程控制組件共同構(gòu)成，工業(yè)控制系統(tǒng)安全面臨的主要威脅不包括（）
A.系統(tǒng)漏洞
B.網(wǎng)絡(luò)攻擊
C.設(shè)備故障
D.病毒破壞查看答案
試題參考答案：C
試題解析與討論：www.xcpkj.com/st/5022913357.html
試題4
惡意代碼是指為達(dá)到惡意目的而專門設(shè)計(jì)的程序或者代碼。常見的惡意代碼類型有：特洛伊木馬、蠕蟲、病毒、后門、Rootkit僵尸程序、廣告軟件。以下惡意代碼中，屬于宏病毒的是（）
A.Trojan.Bank
B.Macro.Melissa
C.Worm.Blaster.g
D.Trojan.huigezi.a查看答案
試題參考答案：B
試題解析與討論：www.xcpkj.com/st/502321498.html
試題5
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
試題參考答案：A、D、C、B、A
試題解析與討論：www.xcpkj.com/st/4115223167.html
試題6
國(guó)產(chǎn)密碼算法是指由國(guó)家密碼研究相關(guān)機(jī)構(gòu)自主研發(fā)，具有相關(guān)知識(shí)產(chǎn)權(quán)的商用密碼算法。以下國(guó)產(chǎn)密碼算法中，屬于分組密碼算法的是 ( )
A．SM2
B．SM3
C．SM4
D．SM9查看答案
試題參考答案：C
試題解析與討論：www.xcpkj.com/st/522386616.html
試題7
安全滲透測(cè)試通過模擬攻擊者對(duì)測(cè)評(píng)對(duì)象進(jìn)行安全攻擊，以驗(yàn)證安全防護(hù)機(jī)制的有效性。其中需要提供部分測(cè)試對(duì)象信息，測(cè)試團(tuán)隊(duì)根據(jù)所獲取的信息，模擬不同級(jí)別的威脅者進(jìn)行滲透測(cè)試，這屬于（ ）。
A．黑盒測(cè)試
B．白盒測(cè)試
C．灰盒測(cè)試
D．盲盒測(cè)試查看答案
試題參考答案：C
試題解析與討論：www.xcpkj.com/st/5228114241.html
試題8
電子郵件是傳播惡意代碼的重要途徑，為了防止電子郵件中的惡意代碼的攻擊，用（）方式閱讀電子郵件
A、網(wǎng)頁
B、純文本
C、程序
D、會(huì)話查看答案
試題參考答案：B
試題解析與討論：www.xcpkj.com/st/284683158.html
試題9
（）是一種通過對(duì)信息進(jìn)行均衡、安全的防護(hù)，提高整個(gè)系統(tǒng)最低安全性能的原則。
A.木桶原則
B.保密原則
C.等級(jí)化原則
D.最小特權(quán)原則查看答案
試題參考答案：A
試題解析與討論：www.xcpkj.com/st/3269825030.html
試題10
以下關(guān)于網(wǎng)絡(luò)流量監(jiān)控的敘述中，不正確的是（）
A、流量檢測(cè)中所檢測(cè)的流量通常采集自主機(jī)節(jié)點(diǎn)、服務(wù)器、路由器接口和路徑等
B、數(shù)據(jù)采集探針是專門用于獲取網(wǎng)絡(luò)鏈路流量的硬件設(shè)備
C、流量監(jiān)控能夠有效實(shí)現(xiàn)對(duì)敏感數(shù)據(jù)的過濾
D、網(wǎng)絡(luò)流量監(jiān)控分析的基礎(chǔ)是協(xié)議行為解析技術(shù)查看答案
試題參考答案：C
試題解析與討論：www.xcpkj.com/st/2850711108.html
信管網(wǎng)訂閱號(hào)
信管網(wǎng)視頻號(hào)
信管網(wǎng)抖音號(hào)
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請(qǐng)以權(quán)威部門公布的內(nèi)容為準(zhǔn)！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛好者、大學(xué)生提供專業(yè)、高質(zhì)量的課程和服務(wù)，解決其考試證書、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專業(yè)軟考教研傾力打造，官方教材參編作者和資深講師坐鎮(zhèn)，通過深研歷年考試出題規(guī)律與考試大綱，深挖核心知識(shí)與高頻考點(diǎn)，為學(xué)員考試保駕護(hù)航。面授、直播＆錄播，多種班型靈活學(xué)習(xí)，滿足不同學(xué)員考證需求，降低課程學(xué)習(xí)難度，使學(xué)習(xí)效果事半功倍。
相關(guān)內(nèi)容
| 發(fā)表評(píng)論 查看完整評(píng)論 | |
考試新手指南
學(xué)習(xí)計(jì)劃攻略
精華備考資料
案例論文干貨
章節(jié)模擬試題
免費(fèi)試聽課程
考試信息推送