Advanced Network Security
Exam Answer Key
Course Introduction
Advanced Network Security delves into sophisticated concepts and techniques pivotal to defending complex networked systems against evolving cyber threats. The course covers topics such as secure network design, intrusion detection and prevention systems, cryptographic protocols, virtual private networks (VPNs), firewalls, and advanced threat modeling. Emphasis is placed on both offensive and defensive security strategies, including penetration testing, vulnerability assessment, incident response, and forensic analysis. Students will explore contemporary issues like distributed denial-of-service (DDoS) attacks, zero-day vulnerabilities, and security challenges in cloud and wireless networks, preparing them to develop, evaluate, and implement robust security measures in real-world environments.
Recommended Textbook
Cryptography and Network Security 6th Edition by William Stallings
Available Study Resources on Quizplus
20 Chapters
842 Verified Questions
842 Flashcards
Source URL: https://quizplus.com/study-set/3983
Page 2
Chapter 1: Overview
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80023
Sample Questions
Q1) __________ is the use of a trusted third party to assure certain properties of a data exchange.
Answer: Notarization
Q2) The emphasis in dealing with active attacks is on prevention rather than detection.
A)True
B)False
Answer: False
Q3) __________ threats exploit service flaws in computers to inhibit use by legitimate users.
A)Information access
B)Reliability
C)Passive
D)Service
Answer: D
Q4) A loss of _________ is the unauthorized modification or destruction of information. Answer: integrity
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Classical Encryption Techniques
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80022
Sample Questions
Q1) The simplest transposition cipher is the _________ technique in which the plaintext is written down as a sequence of diagonals and then read off as a sequence of rows.
Answer: rail fence
Q2) All encryption algorithms are based on two general principles: substitution and ____________ .
Answer: transposition
Q3) The ___________ takes the ciphertext and the secret key and produces the original plaintext.It is essentially the encryption algorithm run in reverse.
A)Voronoi algorithm
B)decryption algorithm
C)cryptanalysis
D)diagram algorithm
Answer: B
Q4) Monoalphabetic ciphers are easy to break because they reflect the frequency data of the original alphabet.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
4
Chapter 3: Block Ciphers and the Data Encryption Standard
Available Study Resources on Quizplus for this Chatper
27 Verified Questions
27 Flashcards
Source URL: https://quizplus.com/quiz/80021
Sample Questions
Q1) A __________ cipher is one that encrypts a digital data stream one bit or one byte at a time.
A)product
B)block
C)key
D)stream
Answer: D
Q2) The vast majority of network based symmetric cryptographic applications make use of stream ciphers.
A)True
B)False
Answer: False
Q3) Two alternatives to DES are AES and _________ DES. Answer: triple
Q4) Greater complexity in the subkey generation algorithm should lead to greater difficulty of cryptanalysis.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Basic Concepts in Number Theory and Finite
Fields
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80020
Sample Questions
Q1) GF stands for __________ field in honor of the mathematician who first studied finite fields.
Q2) A zero-degree polynomial is called a __________ polynomial and is simply an element of the set of coefficients.
Q3) The scheme where you can find the greatest common divisor of two integers by repetitive application of the division algorithm is known as the Brady algorithm.
A)True
B)False
Q4) The polynomial cx)is said to be the __________ of ax)and bx)if cx)divides both ax)and bx)and any divisor of ax)and bx)is a divisor of cx).
Q5) The euclidean algorithm cannot be adapted to find the multiplicative inverse of a polynomial.
A)True
B)False
Q6) Finite fields of order p can be defined using arithmetic mod p.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Q7) The remainder r in the division algorithm is often referred to as a __________ .
Chapter 5: Advanced Encryption Standard
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80019
Sample Questions
Q1) The cipher consists of N rounds,where the number of rounds depends on the
A)key length
B)output matrix
C)State
D)number of columns
Q2) The four separate functions of the Advanced Encryption Standard are: permutation,arithmetic operations over a finite field,XOR with a key,and __________ .
Q3) The forward substitute byte transformation,called _________ ,is a simple table lookup.
Q4) The transformations AddRoundKey and InvMixColumn alter the sequence of bytes in State.
A)True
B)False
Q5) A polynomial mx)is called __________ if and only if mx)cannot be expressed as a product of two polynomials,both of degree lower than that of mx).
Q6) The __________ is a block cipher intended to replace DES for commercial applications.It uses a 128-bit block size and a key size of 128,192,or 256 bits.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Block Cipher Operation
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80018
Sample Questions
Q1) The plaintext of a sector or data unit is organized in to blocks of 128 bits.For encryption and decryption,each block is treated independently.The only exception occurs when the last block has less than 128 bits.In that case the last two blocks are encrypted/decrypted using a ___________ technique instead of padding.
Q2) A typical application of Output Feedback mode is stream oriented transmission over noisy channel,such as satellite communication.
A)True
B)False
Q3) Hardware efficiency,software efficiency,preprocessing,random access,provable security,and simplicity are all advantages of __________ mode.
Q4) The __________ block cipher mode of operation is a general purpose block oriented transmission useful for high speed requirements.
Q5) The__________ is a technique in which an encryption algorithm is used multiple times.
Q6) The _________ must be a data block that is unique to each execution of the encryption operation and may be a counter,a timestamp,or a message number.
Q7) One of the most widely used multiple-encryption scheme is __________ .
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Random and Pseudorandom Number
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80017
Sample Questions
Q1) A __________ uses a nondeterministic source to produce randomness.
A)CSPRBG
B)TRNG
C)PRNG
D)BBS
Q2) The most important and widely used stream cipher is __________ .
Q3) The principle requirement of random or pseudorandom number generation is that the generated number stream be unpredictable.
A)True
B)False
Q4) Two distinct requirements for a sequence of random numbers are unpredictability and __________ .
Q5) The Blum,Blum,Shub generator is referred to as a ____________ .
A)TRNG
B)OFB PRNG
C)QRN
D)CSPRBG
Q6) The longer the keyword the more difficult the cryptanalysis.
A)True
B)False
Page 9
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: More Number Theory
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80016
Sample Questions
Q1) The primitive roots for the prime number 19 are 2,3,10,13,14 and 15.
A)True
B)False
Q2) Discrete logarithms are fundamental to a number of public-key algorithms including __________ key exchange and the DSA.
A)Diffie-Hellman
B)Rijndael-Fadiman
C)Fermat-Euler
D)Miller-Rabin
Q3) Two numbers are relatively prime if they have ________ prime factors in common.
A)zero
B)two
C)several
D)one
Q4) Discrete logarithms are fundamental to the digital signature algorithm and the _________ algorithm.
Q5) The __________ theorem states that it is possible to reconstruct integers in a certain range from their residues modulo a set of pairwise relatively prime moduli.
Q6) Two numbers are __________ if their greatest common divisor is 1.
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Public-Key Cryptography and Rsa
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80015
Sample Questions
Q1) Asymmetric algorithms rely on one key for encryption and a different but related key for decryption.
A)True
B)False
Q2) Asymmetric encryption is also known as ___________ .
A)public-key encryption
B)private-key encryption
C)optimal encryption
D)digital-key encryption
Q3) A trap-door one-way function is easy to calculate in one direction and infeasible to calculate in the other direction unless certain additional information is known.
A)True
B)False
Q4) "The sender 'signs' a message with its private key.Signing is achieved by a cryptographic algorithm applied to the message or to a small block of data that is a function of the message," is a description of a ___________ .
Q5) A __________ is when two sides cooperate to exchange a session key.
To view all questions and flashcards with answers, click on the resource link above.
11
Chapter 10: Other Public-Key Cryptosystems
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80014
Sample Questions
Q1) If a secret key is to be used as a _________ for conventional encryption a single number must be generated.
A)discrete logarithm
B)prime curve
C)session key
D)primitive root
Q2) The Diffie-Hellman key exchange formula for calculation of a secret key by User A is:
A)K = nB x PA
B)K = nA x PB
C)K = nP x BA
D)K = nA x PA
Q3) The addition operation in elliptic curve cryptography is the counterpart of modular multiplication in RSA,and multiple addition is the counterpart of __________ .
Q4) The principal attraction of __________,compared to RSA,is that it appears to offer equal security for a far smaller key size,thereby reducing processing overhead.
Q5) The key exchange protocol vulnerability can be overcome with the use of digital signatures and __________ certificates.
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Cryptographic Hash Functions
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80013
Sample Questions
Q1) __________ is a mechanism or service used to verify the integrity of a message.
A)Message authentication
B)Data compression
C)Data mapping
D)Message digest
Q2) Whirlpool is a popular cryptographic hash function.
A)True
B)False
Q3) If collision resistance is required the value _________ determines the strength of the hash code against brute-force attacks.
Q4) A ___________ accepts a variable length block of data as input and produces a fixed size hash value h = HM).
A)hash resistance
B)hash value
C)hash function
D)hash code
Q5) It is possible to use a hash function but no encryption for message authentication. A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Message Authentication Codes
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80012
Sample Questions
Q1) A recipient in possession of the secret key cannot generate an authentication code to verify the integrity of the message.
A)True
B)False
Q2) One approach to constructing a MAC is to use a symmetric block cipher in such a way that it produces a __________ output for a variable length input.
Q3) The types of functions that may be used to produce an authenticator are grouped into three classes: hash function,message authentication code,and ___________ .
Q4) The _________ attack is when the attacker is looking for two messages M and M1 that produce the same hash: HM)= HM1)
A)birthday
B)chaining
C)MAC
D)hash
Q5) An important characteristic of the MAC algorithm is that it needs to be reversible.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Page 14
Chapter 13: Digital Signatures
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80011
Sample Questions
Q1) The __________ scheme minimizes the message dependent amount of computation required to generate a signature.
Q2) The _________ is based on the difficulty of computing discrete logarithms and is based on schemes originally presented by ElGamal and Schnorr.
Q3) The ____________ components of DSA are the same as in the Schnorr signature scheme.
A)private key
B)EDS
C)global public key
D)message digest
Q4) It is important in a direct digital signature to perform an outer confidentiality function first and then the signature function.
A)True
B)False
Q5) A __________ is where the attacker determines the user's private key.
A)universal forgery
B)selective forgery
C)existential forgery
D)total break
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: Key Management and Distribution
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80010
Sample Questions
Q1) __________ key encryption schemes are secure if the public key is authenticated.
A)Message
B)Management
C)Public
D)Private
Q2) The distribution of session keys delays the start of any exchange and places a burden on network capacity.
A)True
B)False
Q3) If encryption is done at the __________ level a key is needed for every pair of users or processes that require communication.
Q4) __________ is the function that delivers a key to two parties who wish to exchange secure encrypted data.
Q5) Communication between end systems is encrypted using a _________ key.
A)session
B)master
C)permanent
D)message
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 15: User Authentication Protocols
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80009
Sample Questions
Q1) Kerberos relies exclusively on __________ .
A)symmetric encryption
B)asymmetric encryption
C)private key encryption
D)public key encryption
Q2) A __________ attack is where an opponent intercepts a message from the sender and replays it later when the timestamp in the message becomes current at the recipient's site.
Q3) _________ protocols enable communicating parties to satisfy themselves mutually about each other's identity and to exchange session keys.
Q4) The principal underlying standard for federated identity is the __________ which defines the exchange of security information between online business partners.
A)OSAIS
B)SAML
C)RBAC
D)SFIL
Q5) The ticket granting ticket is encrypted with a secret key known only to the AS and the __________ .
To view all questions and flashcards with answers, click on the resource link above. Page 17
Chapter 16: Network Access Control and Cloud Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80008
Sample Questions
Q1) The __________ determines what access should be granted.
A)authentication server
B)policy server
C)supplicant
D)access requestor
Q2) ___________ is an umbrella term for managing access to a network.
A)NAS
B)ARC
C)NAC
D)RAS
Q3) A ________ is a party that can conduct independent assessment of cloud service,information sytem operations,performance,and security of the cloud implementation.
A)cloud auditor
B)cloud carrier
C)cloud broker
D)all of the above
Q4) With a ________ infrastructure,the cloud infrastructure is a composition of two or more clouds that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability.
Page 18
To view all questions and flashcards with answers, click on the resource link above.
Chapter 17: Transport-Level Security
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80007
Sample Questions
Q1) The final message in phase 2,and one that is always required,is the ___________ message,which is sent by the server to indicate the end of the server hello and associated messages.
A)server_done
B)no_certificate
C)goodbye
D)finished
Q2) __________ provides confidentiality using symmetric encryption and message integrity using a message authentication code.
Q3) The first element of the CipherSuite parameter is the key exchange method.
A)True
B)False
Q4) Unlike traditional publishing environments,the Internet is three- way and vulnerable to attacks on the Web servers.
A)True
B)False
Q5) Two important SSL concepts are the SSL session and the SSL _________ .
Q6) __________ refers to the combination of HTTP and SSL to implement secure communication between a Web browser and a Web server.
Page 19
To view all questions and flashcards with answers, click on the resource link above.
Chapter 18: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80006
Sample Questions
Q1) ____________ can occur when a company's wireless LAN or wireless access points to wired LANs in close proximity and may create overlapping transmission ranges.A user intending to connect to one LAN may unintentionally lock on to a wireless access point from a neighboring network.
A)Network injection
B)Denial of service attacks
C)Man-in-the-middle attacks
D)Accidental association
Q2) The use of encryption and authentication protocols is the standard method of countering attempts to alter or insert transmissions.
A)True
B)False
Q3) ___________ and links,such as personal network Bluetooth devices,barcode readers,and handheld PDAs,pose a security risk in terms of both eavesdropping and spoofing.
A)DoS
B)Accidental association
C)Nontraditional networks
D)Ad hoc networks
To view all questions and flashcards with answers, click on the resource link above.
Page 20
Chapter 19: Electronic Mail Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80005
Sample Questions
Q1) The objective of MIME Transfer Encodings is to provide reliable delivery across the largest range of environments.
A)True
B)False
Q2) To enhance security an encrypted message is not accompanied by an encrypted form of the session key that was used for message encryption.
A)True
B)False
Q3) For the __________ subtype the order of the parts is not significant.
A)multipart/mixed
B)multipart/digest
C)multipart/alternative
D)multipart/parallel
Q4) The key legitimacy field,the signature trust field and the owner trust field are each contained in a structure referred to as a ___________ .
Q5) S/MIME provides the following functions: enveloped data,signed data,clear signed data,and ________ .
Q6) PGP provides compression using the __________ algorithm.
To view all questions and flashcards with answers, click on the resource link above. Page 21
Chapter 20: Ip Security
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80004
Sample Questions
Q1) Three different authentication methods can be used with IKE key determination: Public key encryption,symmetric key encryption,and _________ .
Q2) Authentication applied to all of the packet except for the IP header is _________ .
A)tunnel mode
B)transport mode
C)association mode
D)security mode
Q3) __________ provides the capability to secure communications across a LAN,across private and public WANs,and across the Internet.
A)IKE
B)ISA
C)IAB
D)IPsec
Q4) The selectors that determine a Security Policy Database are: Name,Local and Remote Ports,Next Layer Protocol,Remote IP Address,and _________ .
Q5) A security association is uniquely identified by three parameters: Security Protocol Identifier,IP Destination Address,and ________ .
To view all questions and flashcards with answers, click on the resource link above.
22