DES was unveiled in what year?
Give this one a try later!
1975
Are base secrets the same as credentials?
Give this one a try later!
Some base secrets are also credentials, while others are not.
Which of the following are considered "subjects" in an access matrix? Select all that
apply.
,Give this one a try later!
A device driver while it is running.
The word processing program while it executes
User "bob"
An attack that blocks access to a system by other users is called:
Give this one a try later!
denial of service.
Polish cryptanalysts developed strategies to attack the rotor machine ciphers in the
1930s. Cryptanalysts from other Allied countries improved on these techniques at
what location?
Give this one a try later!
Blechley, United Kingdom
Section 7.3 notes that in 1997, using DESCHALL, a desktop computer could crack 1
million keys per second. If we apply Moore's Law to estimate the improvement in
cracking speed, how many million keys per second could we crack 6 years later?
Give this one a try later!
4
,Bob and Alice are typical users who share a computer. Which of the following are true
of a file sharing policy? Assume no tailoring takes place. Select all that apply.
Give this one a try later!
Bob can read Alice's files.
Bob can create, read, and modify his own files.
Which of the following are the primary file-access rights in Unix? Select all that apply.
Give this one a try later!
Execute
Write
Read
Which of the following are true about a one-time pad? Select all that apply.
Give this one a try later!
Is theoretically impossible to crack
Uses a random stream of bits for its key stream
Which of the following is an example of security theater?
Give this one a try later!
, Installing a fake video camera
People who interpret event logs do not like administrators to use privileged accounts
with a fixed name, like "root." Which of the following is the best explanation for this?
Give this one a try later!
The "root" user ID is shared by many people; the event log can't easily tell
which user really performed a logged action
Section 1.6.2 outlines a procedure for disclosing security vulnerabilities in a
commercial device or product. Assume that we have discovered a vulnerability in a
commercial product. The vendor has not acknowledged our initial vulnerability report
or communicated with us in any other way. They have not announced the vulnerability
to the public. We wish to warn the public of the vulnerability as soon as is ethically
defensible. Given the procedure in Section 1.6.2, which of the following is the best
course of action?
Give this one a try later!
After 30 days, announce that the vulnerability exists, and describe how to
reduce a system's risk of attack through that vulnerability.
Risk Management Framework is a way to access ______________________ risks when
developing large-scale computer systems.
Give this one a try later!
Give this one a try later!
1975
Are base secrets the same as credentials?
Give this one a try later!
Some base secrets are also credentials, while others are not.
Which of the following are considered "subjects" in an access matrix? Select all that
apply.
,Give this one a try later!
A device driver while it is running.
The word processing program while it executes
User "bob"
An attack that blocks access to a system by other users is called:
Give this one a try later!
denial of service.
Polish cryptanalysts developed strategies to attack the rotor machine ciphers in the
1930s. Cryptanalysts from other Allied countries improved on these techniques at
what location?
Give this one a try later!
Blechley, United Kingdom
Section 7.3 notes that in 1997, using DESCHALL, a desktop computer could crack 1
million keys per second. If we apply Moore's Law to estimate the improvement in
cracking speed, how many million keys per second could we crack 6 years later?
Give this one a try later!
4
,Bob and Alice are typical users who share a computer. Which of the following are true
of a file sharing policy? Assume no tailoring takes place. Select all that apply.
Give this one a try later!
Bob can read Alice's files.
Bob can create, read, and modify his own files.
Which of the following are the primary file-access rights in Unix? Select all that apply.
Give this one a try later!
Execute
Write
Read
Which of the following are true about a one-time pad? Select all that apply.
Give this one a try later!
Is theoretically impossible to crack
Uses a random stream of bits for its key stream
Which of the following is an example of security theater?
Give this one a try later!
, Installing a fake video camera
People who interpret event logs do not like administrators to use privileged accounts
with a fixed name, like "root." Which of the following is the best explanation for this?
Give this one a try later!
The "root" user ID is shared by many people; the event log can't easily tell
which user really performed a logged action
Section 1.6.2 outlines a procedure for disclosing security vulnerabilities in a
commercial device or product. Assume that we have discovered a vulnerability in a
commercial product. The vendor has not acknowledged our initial vulnerability report
or communicated with us in any other way. They have not announced the vulnerability
to the public. We wish to warn the public of the vulnerability as soon as is ethically
defensible. Given the procedure in Section 1.6.2, which of the following is the best
course of action?
Give this one a try later!
After 30 days, announce that the vulnerability exists, and describe how to
reduce a system's risk of attack through that vulnerability.
Risk Management Framework is a way to access ______________________ risks when
developing large-scale computer systems.
Give this one a try later!
