Question

Subject: Principles of Information Security

True/False

1. TLS is dead and SSL is the path forward.
2. A signed applet can be hijacked.
3. The spiral model is an iterative model designed to enable the construction of increasingly complex versions of a project.
4. The generation of a real random number is a trivial task.
5. Buffer overflow is one of the most common web attack methodologies.
6. Compilers create runtime code that can be executed via an interpreter engine, like a Java virtual machine (JVM), on a computer system.

Multiple Choice

7. Which cryptographic protocols can be used by SSL/TLS?

A. HTTPS and SSMTP

B. Diffie-Hellman and RSA

C. RC4 and 3DES

D. MD5 and SHA-1

8. Which protocol is used for the transfer of hyperlinked data over the Internet, from web servers to browsers?

A. SSMTP

B. HTTP

C. SPOP3

D. HSTS

9. Which port does HTTP traffic travel over by default?

A. TCP port 8080

B. TCP port 80

C. UDP port 8080

D. UDP port 80

10. Which term refers to the process by which application programs manipulate strings to a base form, creating a foundational representation of the input?

A. Canonicalization

B. Obfuscation

C. Injection

D. Blacklisting

11. A(n) __________ outlines the proper settings and configurations for an application or set of applications.

A. application configuration baseline

B. memory management report

C. locally shared object

D. deprecated function

12. Which type of testing involves running the system under a controlled speed environment?

A. Fuzz testing

B. Penetration testing

C. Stress testing

D. Load testing

13. Which term refers to the process of checking whether the program specification captures the requirements from the customer?

A. Data exposure

B. Static analysis

C. Verification

D. Validation

Answer 1

7 .  A. HTTPS and SSMTP

8   B. HTTP

9. B. TCP port 80

10. A. Canonicalization

11. A. application configuration baseline

12. D. Load testing

13. D. Validation