Computer Security Exit Exam Questions
Uploaded by
gemedaComputer Security Exit Exam Questions
Uploaded by
gemedaCommon questions
Powered by AIBiometric technology uses unique personal traits, such as fingerprints or iris patterns, to establish identity, offering a high level of security due to its inherent indivisibility and difficulty to mimic. This contrasts with traditional access methods, like passwords or access cards, which can be shared or stolen. Biometric systems provide robust, non-replicable authentication .
The concept that ensures no modification, addition, or deletion is done to the message is called Integrity .
A stealth virus uses techniques to avoid detection by antivirus software, often by temporarily removing itself from a file's code or masking its presence. This ability to hide and replicate without detection distinguishes it from typical viruses, which may be detected through standard scanning techniques .
Passive attacks, unlike active attacks, involve eavesdropping or monitoring transmissions without causing any modifications. An example of a passive attack is traffic analysis, while modification or impersonating are considered active attacks .
Logic bombs are a type of malicious code embedded in legitimate programs, set to 'explode' or execute when certain conditions are met. This condition-triggered execution distinguishes them from other malware, such as viruses or worms, which often spread or execute independently of such conditions .
Symmetric encryption uses the same key for both encryption and decryption, which makes it faster but requires secure key distribution. Examples include DES and Blowfish. Asymmetric encryption uses different keys for encryption and decryption, providing enhanced security through public and private key pairs, exemplified by RSA .
Permutation ciphering involves rearranging bits or characters according to a defined system, providing complexity that strengthens the encryption against pattern recognition attacks. Unlike substitution, which replaces characters, permutation can be combined with substitution for enhanced security due to its ability to obscure the original structure of the data .
IPsec tunnel mode secures data by encrypting both the payload and the original IP header, effectively providing a secure 'tunnel' through which data passes. This mode is most effective in network-to-network or gateway-to-gateway communications, ensuring that data remains secure across shared or public networks .
IPsec provides several security services: data origin authentication verifies the sender's identity, encryption of user data ensures privacy, and rejecting replayed packets defends against replay attacks. Collectively, these services enhance network security by ensuring authenticity, confidentiality, and integrity of data transmissions .
A proxy server acts as an intermediary between a web browser and a web server, handling requests on behalf of clients, which can protect and anonymize user data. It differs from packet filtering and circuit gateway firewalls in its operation at the application layer, allowing it to tailor functions for web-specific transactions .