110年 - [無官方正解]109 國立清華大學_碩士班考試入學試題_資訊安全研究所：資訊安全#130996

1. What is the primary different between a proxy and a firewall? (A) A proxy allows access, while a firewall denies access. (B) A firewall uses a hardened operating system, while a proxy does not. (C) A proxy makes application-level requests on behalf of internal users, while a firewall typically just passes through authorized traffic. (D) A firewall is capable of successfully performing Network Address Transaction for internal clients, while a proxy is forced to reveal internal addressing schemes.

2. Why is it important for a web application firewall to perform SSL inspection? (A) A lack of SSL inspection would allow a channel of threats past the firewall. (B) SSL is only used when you know you are under attack. (C) Inspecting the SSL traffic assists with load balancing. (D) None of the above.

3. Why is delay-based filtering effective against spam? (A) Spam generators will not send spam if they cannot do it immediately. (B) Spam generators do not wait for the SMTP banner. (C) Spam generators are poorly behaved and will quickly move on to the next server. (D) Spam generators has a very short TTL value.

4. 802.1x defines the encapsulation of EAP. What is EAP? (A) Extensible Autonomous Protocol (B) Extensible Authentication Protocol (C) Extended Authentication Protocol (D) Encapsulation Authentication Protocol

5. In ACLs, an implicit deny will apply to network traffic that: (A) Matches two or more rules in the ACL. (B) Does not match any entry in the ACL. (C) Originates from inside the DMZ. (D) Comes from a poofed source address.

6. What is a threat to VPN over open wireless? (A) Hackers can sniff all the VPN packets and decrypt them. (B) The user must connect to the open wireless before starting VPN, allowing an attacker a potential window of time to compromise the machine. (C) A certificate could be faked, allowing access into the corporate server. (D) All of the above.

7. Which of the following is not a commonly used file-hashing algorithm? (A) SHA-224 (B) SHA-256 (C) SHA-512 (D) TLS

8. Which of the following techniques is most likely to be employed by a credit card company looking for fraudulent transactions? (A) Big data analysis (B) Network forensics (C) Script mining (D) Drive imaging

9. What is a zero-day exploit? (A) A piece of malicious code that attaches itself to another piece of code in order to replicate. (B) An attack that exploits a previously unknown vulnerability. (C) A piece of software that appears to avoid one service but that also hides another purpose. (D) Malware specifically designed to modify the operation of the operating system.

10. Which of the following correctly defines phishing? (A) The use of social engineering to trick a user into responding to an e-mail to initiate a malware-based attack. (B) The use of social engineering to talk someone into revealing credentials. (C) The hacking of computer systems and networks associated with the phone company. (D) Looking over the shoulder or using a camera to view a user entering sensitive data.

11. Which of the following best defines social engineering? (A) An attempt by an attacker to discover unprotected wireless networks. (B) The targeting of high-value individuals. (C) The art of deceiving another person to reveal confidential information. (D) An attempt by an attack to gain unauthorized access through the telephone system.

12. What is the primary benefit of steganography over encryption? (A) Can hold more data securely (B) Harder to brute force the key (C) Difficulty in detecting it (D) Ease of Implementation

13. A message digest provides integrity by: (A) Providing encryption that cannot be unlocked (B) Providing a value that can be independently verified to show if the message changed. (C) Providing message confidentiality so other users cannot see the message (D) Applying a signature to the message

14. Which is an example of fault tolerance in a computer system? (A) Dual power supplies (B) RAID 5 configured disks. (C) Multiple network interface controllers (D) All of the above

15. If an attack is able to insert himself into an encrypted conversion between you and a secure web server, he has successfully executed what type of attack? (A) A Smurf attack (B) Replay attack (C) Clickjacking attack (D) Man-in-the-middle attack

16. Your entire office is passing around a PowerPoint presentation of dancing and singing hamsters. Everyone thinks it's great until the next morning when everyone's hard drives appear to have been erased. The dancing hamster file is an example of a: (A) Virus (B) Trojan (C) Rootkit (D) Exploit

17. How is near field communication like Ethernet? (A) It does not enforce security itself, but relies on higher-level protocols such as SSL. (B) It forces each endpoint to communicate through a switch. (C) It provides collision avoidance. (D) All of the above.

18. Why is free Wi-Fi, such as in coffee shops, a popular target for session hijacking? (A) The unsecured Wi-Fi allows an attacker to place malicious files on the user's machine. (B) The site uses a captive portal. (C) Unsecured Wi-Fi allows the attacker to sniff the wireless session for a user's session cookie. (D) The user does not engage VPN over wireless.

19. What makes rouge access points a threat? (A) They are loaded with malware. (B) They potentially allow any person access to the corporate network. (C) They only support WEP, which is easily broken. (D) Wireless signals are short range, so extra access points are not a threat.

20. Your boss is trying to find more information about port-based network access controls. Which of the following IEEE standards should she be looking at? (A) 802.1x (B) 802.11x (C) 802.x (D) 801.2x

21. A buffer overflow attack was launched against one of your Windows-based web servers. You'd like to know what process was affected on the server itself. Where might you look for clues as to what process was affected? (A) Access log (B) Application log (C) Security log (D) Setup log

22. Which of the following correctly describes the relationship between SSL and TLS? (A) TLS is the open-community version of SSL. (B) SSL can be modified by developers to expand the protocol's capabilities. (C) TLS is a proprietary protocol, while SSL is an open-community protocol. (D) SSL is more extensible and backward compatible with TLS.

23. Which of the following correctly describes a drawback of symmetric key system? (A) Computationally less intensive than asymmetric systems. (B) Work much more slowly than asymmetric systems. (C) Carry out mathematically intensive tasks. (D) Key must be delivered via secure courier.

24. Which of the following occurs in a PKI environment? (A) The RA creates the certificate, and the CA signs it. (B) The CA signs the certificate. (C) The RA sign the certificate. (D) The user signs the certificate.

25. Which of the following best describes how a digit signature is created? (A) The sender encrypts a message digest with his private key. (B) The sender encrypts a message digest with his public key. (C) The receiver encrypts a message digest with his private key. (D) The receiver encrypts a message digest with his public key.

26. What is Double DES?

27. What is the most effective method to break Double DES? How about the cost (efforts) for this method?

28. What is one-time pad? Please explain how it works clearly and list its requirements for key.