Network Defense Pre-Test Questions
Course Introduction
Network Defense offers an in-depth exploration of the strategies, tools, and techniques used to protect computer networks from various cyber threats and attacks. Students will learn the fundamental principles of network security, including risk assessment, firewall management, intrusion detection systems, and the implementation of security policies. The course covers defensive methodologies such as access controls, encryption, virtual private networks (VPNs), and security monitoring. Practical exercises and case studies will help students analyze vulnerabilities, respond to incidents, and reinforce best practices in safeguarding corporate and institutional networks.
Recommended Textbook Cryptography and Network Security 6th Edition by William Stallings
Available Study Resources on Quizplus
20 Chapters
842 Verified Questions
842 Flashcards
Source URL: https://quizplus.com/study-set/3983
Page 2
Chapter 1: Overview
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80023
Sample Questions
Q1) __________ is the use of a trusted third party to assure certain properties of a data exchange.
Answer: Notarization
Q2) A _________ attack attempts to learn or make use of information from the system but does not affect system resources.
Answer: passive
Q3) Patient allergy information is an example of an asset with a high requirement for integrity.
A)True
B)False
Answer: True
Q4) An)__________ service is one that protects a system to ensure its availability and addresses the security concerns raised by denial- of- service attacks.
A)replay
B)availability
C)masquerade
D)integrity
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Classical Encryption Techniques
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80022
Sample Questions
Q1) The __________ attack is the easiest to defend against because the opponent has the least amount of information to work with.
A)ciphertext-only
B)chosen ciphertext
C)known plaintext
D)chosen plaintext
Answer: A
Q2) All encryption algorithms are based on two general principles: substitution and
Answer: transposition
Q3) The __________ consist of a set of independently rotating cylinders through which electrical pulses can flow.Each cylinder has 26 input pins and 26 output pins with internal wiring that connects each input pin to a unique output pin.
Answer: rotor machines
Q4) Cryptographic systems are characterized along three independent dimensions: The type of operations used for transforming plaintext to ciphertext;The way in which the plaintext is processed;and __________ .
Answer: The number of keys used
To view all questions and flashcards with answers, click on the resource link above.
4
Chapter 3: Block Ciphers and the Data Encryption Standard
Available Study Resources on Quizplus for this Chatper
27 Verified Questions
27 Flashcards
Source URL: https://quizplus.com/quiz/80021
Sample Questions
Q1) If the bit-stream generator is a key-controlled algorithm the two users only need to share the generating key and then each can produce the keystream.
A)True
B)False
Answer: True
Q2) The strict avalanche criterion and the bit independence criterion appear to weaken the effectiveness of the confusion function.
A)True
B)False
Answer: False
Q3) The ________ cipher structure,which dates back over a quarter century and which,in turn,is based on Shannon's proposal of 1945,is the structure used by many significant symmetric block ciphers currently in use.
Answer: Feistel
Q4) Two alternatives to DES are AES and _________ DES. Answer: triple
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Basic Concepts in Number Theory and Finite
Fields
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80020
Sample Questions
Q1) A ring is said to be _________ if it satisfies the condition ab = ba for all a,b in R.
A)cyclic
B)commutative
C)abelian
D)infinite
Q2) Cryptographic algorithms do not rely on properties of finite fields.
A)True
B)False
Q3) Unlike ordinary addition,there is not an additive inverse to each integer in modular arithmetic.
A)True
B)False
Q4) The scheme where you can find the greatest common divisor of two integers by repetitive application of the division algorithm is known as the Brady algorithm. A)True
B)False
Q5) Let S be the set of integers,positive,negative,and 0,under the usual operations of addition and multiplication.S is an __________ domain.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Advanced Encryption Standard
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80019
Sample Questions
Q1) Virtually all encryption algorithms,both conventional and public- key,involve arithmetic operations on integers.
A)True
B)False
Q2) A polynomial mx)is called __________ if and only if mx)cannot be expressed as a product of two polynomials,both of degree lower than that of mx).
Q3) An example of a finite field is the set Z<sub>p</sub> consisting of all the integers {0,1,... ,p - 1},where p is a __________ and in which arithmetic is carried out modulo p.
Q4) In the AES structure both encryption and decryption ciphers begin with an) __________ stage,followed by nine rounds that each include all four stages, followed by a tenth round of three stages.
A)Substitute bytes
B)AddRoundKey
C)MixColumns
D)ShiftRows
Q5) DES is a block cipher intended to replace AES for commercial applications.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Block Cipher Operation
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80018
Sample Questions
Q1) The plaintext of a sector or data unit is organized in to blocks of 128 bits.For encryption and decryption,each block is treated independently.The only exception occurs when the last block has less than 128 bits.In that case the last two blocks are encrypted/decrypted using a ___________ technique instead of padding.
Q2) Hardware efficiency,software efficiency,preprocessing,random access,provable security,and simplicity are all advantages of __________ mode.
Q3) The _________ and _________ block cipher modes of operation are used for authentication.
A)OFB,CTR
B)ECB,CBC
C)CFB,OFB
D)CBC,CFB
Q4) _________ mode is similar to Cipher Feedback,except that the input to the encryption algorithm is the preceding DES output.
A)Cipher Feedback
B)Counter
C)Output Feedback
D)Cipher Block Chaining
To view all questions and flashcards with answers, click on the resource link above.
8
Chapter 7: Random and Pseudorandom Number
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80017
Sample Questions
Q1) If the PRF does not generate effectively random 128-bit output values it may be possible for an adversary to narrow the possibilities and successfully use a brute force attack.
A)True
B)False
Q2) Two approaches that use a block cipher to build a PNRG and have gained widespread acceptance are:
A)CTR mode and CFB mode
B)CTR mode and OFB mode
C)CBC mode and CFB mode
D)OFB mode and ECB mode
Q3) The longer the keyword the more difficult the cryptanalysis.
A)True
B)False
Q4) The __________ test is the most basic test of randomness and must be included in any test suite.
A)frequency
B)runs
C)unpredictability
D)Maurer
Page 9
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: More Number Theory
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80016
Sample Questions
Q1) The Miller-Rabin test can determine if a number is not prime but cannot determine if a number is prime.
A)True
B)False
Q2) If p is prime and a is a positive integer,then ap = amod p)is an alternative form of _________ theorem.
A)Rijndael's
B)Vignere's
C)Euler's
D)Fermat's
Q3) A prime number can have a remainder when divided by positive or negative values of itself.
A)True
B)False
Q4) A one-to-one correspondence is called __________ .
A)a bijection
B)an inclusive
C)a composite
D)an index
Q5) Two numbers are __________ if their greatest common divisor is 1.
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Public-Key Cryptography and Rsa
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80015
Sample Questions
Q1) Plaintext is transformed into ciphertext using two keys and a decryption algorithm.
A)True
B)False
Q2) __________ encryption is a form of cryptosystem in which encryption and decryption are performed using a public key and a private key.
Q3) The encryption algorithm performs various transformation on the ciphertext.
A)True
B)False
Q4) T F` 10.If the authenticator is encrypted with the sender's private key,it serves as a signature that verifies origin,content,and sequencing.
A)True
B)False
Q5) __________ depend on the running time of the decryption algorithm.
A)Mathematical attacks
B)Timing attacks
C)Chosen ciphertext attacks
D)Brute-force attacks
Q6) A __________ is when two sides cooperate to exchange a session key.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Other Public-Key Cryptosystems
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80014
Sample Questions
Q1) To form a cryptographic system using __________ we need to find a "hard-problem" corresponding to factoring the product of two primes or taking the discrete logarithm.
Q2) ECC is fundamentally easier to explain than either RSA or Diffie-Hellman.
A)True
B)False
Q3) The fastest known technique for taking the elliptic curve logarithm is known as the _________ method.
Q4) Asymmetric algorithms are typically much slower than symmetric algorithms so they are not used to generate open-ended __________ generator bit streams.
Q5) There is not a computational advantage to using ECC with a shorter key length than a comparably secure TSA.
A)True
B)False
Q6) The purpose of the ___________ algorithm is to enable two users to securely exchange a key that can then be used for subsequent encryption of messages.
Q7) Two families of elliptic curves are used in cryptographic applications: prime curves over Zp and __________ over GF2m).
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Cryptographic Hash Functions
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80013
Sample Questions
Q1) __________ are measures of the number of potential collisions for a given hash value.
A)MACs
B)Primitives
C)Hash codes
D)Preimages
Q2) The cryptographic hash function requirement that guarantees that it is impossible to find an alternative message with the same hash value as a given message and prevents forgery when an encrypted hash code is used is the ___________ .
A)collision resistant
B)pseudorandomness
C)preimage resistant
D)second preimage resistant
Q3) The two categories of attacks on hash functions are __________ attacks and cryptanalysis.
Q4) SHA-1 is very similiar in structure and in the basic mathematical operations used to __________ and SHA-0.
Q5) The most important and widely used family of cryptographic hash functions is the __________ family.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Message Authentication Codes
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80012
Sample Questions
Q1) The straightforward use of public-key encryption provides confidentiality and authentication.
A)True
B)False
Q2) NIST SP 800-90,IEEE 802.11i,and TLS/WTLS are three ____________ based on HMAC.
Q3) An alternative authentication technique involves the use of a secret key to generate a small fixed size block of data known as a __________ or MAC that is appended to the message.
Q4) Message authentication may also verify sequencing and timeliness.
A)True
B)False
Q5) The _________ attack is when the attacker is looking for two messages M and M1 that produce the same hash: HM)= HM1)
A)birthday
B)chaining
C)MAC
D)hash
Q6) The HtE approach is used in the __________ protocol to protect WiFi networks.
Q7) Attacks on MACs can be grouped into two categories: brute-force attacks and
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Digital Signatures
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80011
Sample Questions
Q1) A digital signature can guarantee the integrity but not the source of the message.
A)True
B)False
Q2) The ____________ components of DSA are the same as in the Schnorr signature scheme.
A)private key
B)EDS
C)global public key
D)message digest
Q3) The digital signature approach uses an algorithm that is designed to provide only the _________ function.
A)digital signature
B)ElGamal
C)DSA
D)timestamp
Q4) _________ specifies that if the signature generation process results in a value of s = 0 a new value of k should be generated and the signature should be recalculated.
To view all questions and flashcards with answers, click on the resource link above.
15
Chapter 14: Key Management and Distribution
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80010
Sample Questions
Q1) Each user must share a unique key with the key distribution center for purposes of key distribution.
A)True
B)False
Q2) Several techniques have been proposed for the distribution of public keys.The proposals can be grouped into the following four general schemes: public announcement,publicly available directory,public-key certificates,and ____________.
Q3) A public-key certificate scheme alone does not provide the necessary security to authenticate the public key.
A)True
B)False
Q4) Because certificates are forgeable they cannot be placed in a directory without the need for the directory to make special efforts to protect them.
A)True
B)False
Q5) Session keys are transmitted in encrypted form using a __________ key that is shared by the key distribution center and an end system or user.
To view all questions and flashcards with answers, click on the resource link above.
Page 16
Chapter 15: User Authentication Protocols
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80009
Sample Questions
Q1) It is the ticket that proves the client's identity.
A)True
B)False
Q2) A solution,which eliminates the burden of each server having to confirm the identities of clients who request service,is to use an __________ that knows the passwords of all users and stores these in a centralized database and shares a unique secret key with each server.
Q3) A service to solve the problem of minimizing the number of times that a user has to enter a password and the risk of an eavesdropper capturing the password and using it is known as the __________ .
A)authentication server
B)ticket granting server
C)Kerberos mutual authentication
D)PCBC mode
Q4) To convince the server that a user is authentic,the authentication server creates a _________ that contains the user's ID and network address and the server's ID and sends it back to the client so they can continue the request for service.
Q5) An authentication process consists of two steps: identification step and __________ step.
To view all questions and flashcards with answers, click on the resource link above. Page 17
Chapter 16: Network Access Control and Cloud Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80008
Sample Questions
Q1) In using cloud infrastructures,the client necessarily cedes control to the CP on a number of issues that may affect security.
A)True
B)False
Q2) The ___________ functions as an access control point for users in remote locations connecting to an enterprise's internal network.
Q3) NIST defines three service models,which can be viewed as nested service alternatives: software as a service,platform as a service,and _________ as a service.
Q4) A ________ is a party that can conduct independent assessment of cloud service,information sytem operations,performance,and security of the cloud implementation.
A)cloud auditor
B)cloud carrier
C)cloud broker
D)all of the above
Q5) The Extensible Authentication Protocol supports multiple authentication methods.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 18
Chapter 17: Transport-Level Security
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80007
Sample Questions
Q1) _________ attacks include impersonating another user,altering messages in transit between client and server and altering information on a Web site.
A)Active
B)Passive
C)Shell
D)Psuedo
Q2) The certificate message is required for any agreed on key exchange method except fixed Diffie-Hellman.
A)True
B)False
Q3) Phase _________ of the Handshake Protocol establishes security capabilities.
A)4
B)1
C)2
D)3
Q4) ISSl/TLS includes protocol mechanisms to enable two TCP users to determine the security mechanisms and services they will use.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 19
Chapter 18: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80006
Sample Questions
Q1) __________ is the primary service used by stations to exchange MPDUs when the MPDUs must traverse the DS to get from a station in one BSS to a station in another BSS.
Q2) The term used for certified 802.11b products is ___________ .
A)WAP
B)Wi-Fi
C)WEP
D)WPA
Q3) MAC spoofing occurs when an attacker is able to eavesdrop on network traffic and identify the MAC address of a computer with network privileges.
A)True
B)False
Q4) The MPDU exchange for distributing pairwise keys is known as the _________ which the STA and SP use to confirm the existence of the PMK,to verify the selection of the cipher suite,and to derive a fresh PTK for data sessions.
Q5) The MPDU authentication phase consists of three phases.They are: connect to AS,EAP exchange and _________ .
To view all questions and flashcards with answers, click on the resource link above. Page 20
Chapter 19: Electronic Mail Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80005
Sample Questions
Q1) As a default,PGP compresses the message after applying the signature but before encryption.
A)True
B)False
Q2) The ________ MIME field is a text description of the object with the body which is useful when the object is not readable as in the case of audio data.
A)Content-Type
B)Content-Description
C)Content-ID
D)Content-Transfer-Encoding
Q3) S/MIME provides the following functions: enveloped data,signed data,clear signed data,and ________ .
Q4) Each PGP entity must maintain a file of its own public/private key pairs as well as a file of private keys of correspondents.
A)True
B)False
Q5) ___________ is an open-source,freely available software package for e-mail security.
Q6) PGP provides compression using the __________ algorithm.
21
To view all questions and flashcards with answers, click on the resource link above.
Chapter 20: Ip Security
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80004
Sample Questions
Q1) The default automated key management protocol for IPsec is referred to as ISAKMP/Oakley.
A)True
B)False
Q2) IPsec encompasses three functional areas: authentication,key management,and
Q3) A _________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.
A)SAD
B)SPD
C)SA
D)SPI
Q4) The Payload Data Field is designed to deter replay attacks.
A)True
B)False
Q5) Confidentiality is provided by an encryption format known as __________ .
Q6) A __________ attack is one in which an attacker obtains a copy of an authenticated packet and later transmits it to the intended destination.
Q7) Authentication makes use of the _________ message authentication code.
Page 22
To view all questions and flashcards with answers, click on the resource link above.