计算机2025年信息安全理论测试.docxVIP

计算机2025年信息安全理论测试

考试时间：______分钟总分：______分姓名：______

一、选择题（每题3分，共30分）

1.下列哪一项不属于信息安全的基本属性？

A.保密性

B.完整性

C.可用性

D.可追溯性

2.以下哪种攻击方式属于被动攻击？

A.DoS攻击

B.网络钓鱼

C.嗅探器攻击

D.拒绝服务攻击

3.symmetricencryptionalgorithmsaregenerallyfasterthanasymmetricencryptionalgorithmsbecause

A.theyuseshorterkeys

B.theyusesimplermathematicaloperations

C.theyaremoresecure

D.theyarelesscomplex

4.WhichofthefollowingisNOTacommonmethodofauthentication？

A.Passwordauthentication

B.Biometricauthentication

C.Tokenauthentication

D.Networkauthentication

5.Theprimarypurposeofafirewallisto

A.providesecureremoteaccess

B.detectandpreventunauthorizedaccesstoanetwork

C.encryptdataintransit

D.backupdata

6.Whichofthefollowingisatypeofmalware？

A.Trojanhorse

B.Virus

C.Worm

D.Alloftheabove

7.Asecuritypolicyisasetofrulesandproceduresthat

A.definehowanorganizationwillprotectitsinformationassets

B.outlinethestepstotakeintheeventofasecuritybreach

C.specifytheminimumsecurityrequirementsforanorganization

D.Alloftheabove

8.Whichofthefollowingisariskmitigationstrategy?

A.Avoidance

B.Transfer

C.Mitigation

D.Alloftheabove

9.TheBell-LaPadulamodelisprimarilyconcernedwith

A.ensuringdataconfidentiality

B.ensuringdataintegrity

C.ensuringdataavailability

D.ensuringdataauthenticity

10.Whichofthefollowingisacommonsecurityvulnerability?

A.SQLinjection

B.Cross-sitescripting

C.Bufferoverflow

D.Alloftheabove

二、填空题（每空4分，共20分）

1.Theprocessofensuringthatinformationisnotdisclosedtounauthorizedindividuals,entities,orprocessesiscalled________.

2.Adigitalsignatureisusedtoprovide________and________ofamessage.

3.The________modelfocusesonensuringdataconfidenti