11.In a generic identity management architecture _______ are entities that obtain and employ data maintained and provided by identity and attribute providers, often to support authorization decisions and to collect audit information. 12._______ is an XML-based language for the exchange of security information between online business partners. 13.________ is a set of...

Solved

Computer Science 2 Views Bookmark

  SHORT ANSWER QUESTIONS: 1._______ systems are automated methods of verifying or recognizing identity on the basis of some physiological or behavioral characteristic. 2.A software utility initially developed at MIT and available both in the public domain and in commercially supported versions, ________ is the defacto standard for remote authentication. 3.An alternative to each...

Solved

Computer Science 2 Views Bookmark

11.  ________ is a process where authentication and permission will be passed on from one system to another, usually across multiple enterprises, reducing the number of authentications needed by the user. A.  IntegrationB.  Registration C.  SynchronizationD.  Federation 12.  _______ is a minimal set of conventions for invoking code using XML over HTTP that...

Solved

Computer Science 2 Views Bookmark

  MULTIPLE CHOICE QUESTIONS: 1.One of the earliest and most widely used services is _________. A.  KerberosB.  FIM C.  PKID.  X.509 2._______ is important as part of the directory service that it supports and is also a basic building block used in other standards. A.  PKIB.  X.509 C.  KerberosD.  FIM 3.  ________ requires that a user prove his...

Solved

Computer Science 2 Views Bookmark

TF11.  The principal objective for developing a PKI is to enable secure, convenient, and efficient acquisition of private keys. TF12.  Initialization begins the process of enrolling in a PKI. TF13.  Update is not required when the certificate lifetime expires or as a result of certificate revocation. TF14.  CMP, defined in RFC 2510, is designed to...

Solved

Computer Science 2 Views Bookmark

  Chapter 23 – Internet Authentication Applications   TRUE/FALSE QUESTIONS: TF1.The approach taken by Kerberos is using authentication software tied to a secure authentication server. TF2.  The overall scheme of Kerberos is that of a trusted third-party authentication service. TF3.  Kerberos is designed to counter only one specific threat to the security of a client/server dialogue. TF4.  An obvious security...

Solved

Computer Science 2 Views Bookmark

11.The SSL record protocol provides two services for SSL connection:  message integrity and _________. 12.The _________ is used to convey SSL-related alerts to the peer entity. 13.A security association is uniquely identified by three parameters:  security parameter index, protocol identifier, and ________________. 14.IP-level security encompasses three functional areas:  authentication, confidentiality, and _________. 15.IPsec provides...

Solved

Computer Science 2 Views Bookmark

  SHORT ANSWER QUESTIONS: 1.________ is a security enhancement to the MIME Internet e-mail format standard, based on technology from RSA Data Security. 2.S/MIME content-types support four new functions:  enveloped data, __________, clear-signed data, and signed and enveloped data. 3.A _________ is formed by taking the message digest of the content to be signed...

Solved

Computer Science 2 Views Bookmark

11.  _______ is a list that contains the combinations of cryptographic algorithms supported by the client. A.  Compression methodB.  Session ID C.  CipherSuiteD.  All of the above 12.  ESP supports two modes of use:  transport and _________. A.  paddingB.  tunnel C.  payloadD.  sequence 13.  IPsec can assure that _________. A.  a router advertisement comes from an authorized...

Solved

Computer Science 2 Views Bookmark

  MULTIPLE CHOICE QUESTIONS: 1._____ defines a number of content formats, which standardize representations for the support of multimedia e-mail. A.  MEMB.  MIME C.  MSCD.  DKIM 2.  The ________ function consists of encrypted content of any type and encrypted-content encryption keys for one or more recipients. A.  clear-signed dataB.  signed data C.  enveloped dataD.  signed and enveloped...

Solved

Computer Science 2 Views Bookmark

TF11.  DKIM is designed to provide an e-mail authentication technique that is transparent to the end user. TF12.  Most browsers come equipped with SSL and most Web servers have implemented the protocol. TF13.  Search engines support HTTPS. TF14.  The IAB included authentication and encryption as necessary security features in IPv6. TF15.  Transport mode provides protection primarily for...

Solved

Computer Science 2 Views Bookmark

. Chapter 22 – Internet Security Protocols and Standards   TRUE/FALSE QUESTIONS: TF1. MIME is an extension to the old RFC 822 specification of an Internet mail format. TF2.  MIME provides the ability to sign and/or encrypt e-mail messages. TF3.  Recipients without S/MIME capability can view the message content, although they cannot verify the signature. TF4.  The recipient of...

Solved

Computer Science 2 Views Bookmark

11.“Must support hash value lengths of 224, 256,384, and 512 bits” and “algorithm must process small blocks at a time instead of requiring the entire message to be buffered in memory before processing it” are requirements for ________. 12.If speed isa concern, it is fully acceptable to use _________ rather than...

Solved

Computer Science 2 Views Bookmark

  SHORT ANSWER QUESTIONS: 1.The Secure Hash Algorithm (SHA) was developed by the _________ and published as a federal information processing standard (FIPS 180) in 1993. 2.Versions of SHA, with hash value lengths of 256, 384, and 512 bits, (SHA-256, SHA-384, and SHA 512) are collectively known as _________. 3.The evaluation criteria for the...

Solved

Computer Science 2 Views Bookmark

11.  ___________ was the first published public-key algorithm. A.  NISTB.  Diffie-Hellman C.  RC4D.  RSA 12.  The National Institute of Standards and Technology has published Federal Information Processing Standard FIPS PUB 186, known as the __________. A.  XORB.  MD5 C.  MACD.  DSS 13.  The __________ uses an algorithm that is designed to provide only the digital signature...

Solved

Computer Science 2 Views Bookmark

  MULTIPLE CHOICE QUESTIONS: 1.SHA-1 produces a hash value of __________ bits. A.  256B.  160 C.  384D.  180 2.  In 2005, NIST announced theintention to phase out approval of _______ and move to a reliance on the other SHAversions by 2010. A.  SHA-1B.  SHA-512 C.  SHA-256D.  SHA-2 3.  Issued as RFC 2104, __________ has been chosen as the...

Solved

Computer Science 2 Views Bookmark

TF11.  Unlike RSA, DSS cannot be used for encryption or key exchange. TF12.  The operations performed during a round consist of circular shifts, and primitive Boolean functions based on DSS, MD5, SHA, and RSA. TF13.  SHA-3 algorithms must be designed to resist any potentially successful attack on SHA-2 functions. TF14.  Cryptographic hash functions generally execute...

Solved

Computer Science 2 Views Bookmark

  Chapter 21 – Public-Key Cryptography and Message Authentication   TRUE/FALSE QUESTIONS: TF1.The one-way hash function is important not only in message authentication but also in digital signatures. TF2.  SHA is perhaps the most widely used family of hash functions. TF3.  SHA-1 is considered to be very secure. TF4.  SHA-2 shares the same structure and mathematical operations as...

Solved

Computer Science 2 Views Bookmark

11.With _________ encryption the encryption process is carried out at the two end systems. 12.With ______ encryption each vulnerable communications link is equipped on both ends with an encryption device. 13.For symmetric encryption to work the two parties to an exchange must share the same _____, which must be protected from access...

Solved

Computer Science 2 Views Bookmark

  SHORT ANSWER QUESTIONS:   1.A symmetric encryption scheme has five ingredients:  plaintext, encryption algorithm, ciphertext, decryption algorithm and _________. 2._________ is the process of attempting to discover the plaintext or key. 3.A ________ cipher processes the input one block of elements at a time, producing an output block for each input block. 4.A ________ cipher...

Solved

Computer Science 2 Views Bookmark

11.   __________ is a term that refers to the means of delivering a key to two parties that wish to exchange data without allowing others to see the key. A.  Session keyB.  Subkey C.  Key distribution techniqueD.  Ciphertext key 12.  A ________ is a key used between entities for the purpose of distributing...

Solved

Computer Science 2 Views Bookmark

  MULTIPLE CHOICE QUESTIONS: 1._________ is the original message or data that is fed into the algorithm as input. A.  PlaintextB.  Encryption algorithm C.  Decryption algorithmD.  Ciphertext 2.  The exact substitutions and transformations performed by the algorithm depend        on the ________. A.  ciphertextB.  decryption algorithm C.  secret keyD.  encryption algorithm 3.  The _________ is the encryption algorithm run...

Solved

Computer Science 2 Views Bookmark

TF11.  In using encryption, we need to decide what to encrypt and where the encryption gear should be located. TF12.  One disadvantage of the link encryption approach is that the message must be decrypted each time it enters a frame switch. TF13. “The plaintext is 64 bits in length and the key is 56...

Solved

Computer Science 2 Views Bookmark

  Chapter 20 – Symmetric Encryption and Message Confidentiality   TRUE/FALSE QUESTIONS: TF1.Symmetric encryption is also referred to as secret-key or single-key encryption. TF2.   Plaintext is the scrambled message produced as output. TF3.  If both sender and receiver use the same key the system is referred to as asymmetric. TF4.  The ciphertext-only attack is the easiest to defend against. TF5. ...

Solved

Computer Science 2 Views Bookmark

11.The ___________ Act places restrictions on online organizations in the collection of data from children under the age of 13. 12. Privacy is broken down into four major areas:  anonymity, unlinkability, unobservability, and _________. 13. _______ refers to a system of moral principles that relates to the benefits and harms of particular...

Solved

Computer Science 2 Views Bookmark