Suppose a user has an iPhone (running iOS) and downloads an app called Innocent from the Apple App Store and installs it. The user unlocks the phone and runs Innocent. Innocent exploits a bug in the iOS kernel which allows Innocent to redirect execution inside the kernel to code that Innocent controls. Now Innocent can execute any instructions it likes inside the iOS kernel. Innocent is not able to exploit any bugs in the phone’s secure enclave. Can Innocent read the user’s private information stored in the phone’s flash (e.g. Contacts and messages), or will the security measures described in the paper keep the data private? If Innocent is only able to see encrypted data, then the phone has successfully kept the data private. Circle the security features of the phone (if any) that will prevent Innocent from reading information from the flash on the phone.

suppose   a  user   has an   iphone  (running   ios)   and  downloads  an app called innocent   from  the   apple   app   store anbd   installs  it. the user unlocks the   phone   and  runs  innocent. innocent  exploits   a bug  in  the   ios  kernel whihc   allows   innocent  to  redirect   exection   inside   the kernel   to   code   that   innocent  controls. now   innocent   can execute   any   instructions  it likes  inside the ios  kernel. innocent   isn't   able to   exploit any bugs in teh phone’s   secure  enclave.   can  innocent  read  the user’s private   information stored in  the   phone’s  flash (e.g. contacts   and   messages),   or  will the   security  measures  described   in   the  paper  keep  the   data   private?   if  innocent is   only  able to  see encrypted data,  then  the   phone  has   successfully   kept  tghe  data  private.  circle the   security  features of   the   phone   (if any)  that will  prevent  innocent from   reading information from  tjhe flash on  the  phone.

Suppose a user has an iPhone (runnin iOS) and downloads an app called Innocent from da Apple App Store and installs it. Da user unlocks da phone and runs Innocent. Innocent exploits a bug in da iOS kernel which allows Innocent to redirect execution inside da kernel to code dat Innocent controls. Now Innocent can execute any instructions it likes inside da iOS kernel. Innocent is not able to exploit any bugs in da phone’s secure enclave. Can Innocent read da user’s private information stored in da phone’s flash (e.g. Contacts and messages), or gon the security measures described in da paper keep da data private? If Innocent is only able to see encrypted data, then da phone has successfully kept da data private. Circle da security features of da phone (if any) dat will prevent Innocent from reading information from da flash on da phone.

Why is it that anti-virus scanners would not have found an exploitation of Heartbleed?

why's  it   that anti-virus   scanners wouldn't  have found an exploitation   of  heartbleed?

Why is it dat anti-virus scanners would not have found an exploitation of Heartbleed?

Suppose we define h(H, m) = E(m, H)h(H,m)=E(m,H). Then the resulting h(\cdot,\cdot)h(⋅,⋅) is not collision resistant: to build a collision (H,m)(H,m) and (H’,m’)(H’,m’) choose random (H,m,m’)(H,m,m’) and construct H’H’ as follows:

suppose we  define h(h, m) =   e(m,  h)h(h,m)=e(m,h).   then the resulting  h(\cdot,\cdot)h(⋅,⋅)   isn't  collision  resistant:  to  build a collision (h,m)(h,m)  and (h’,m’)(h’,m’)   choose  random (h,m,m’)(h,m,m’)  and   construct h’h’   as   follows:

Suppose we define h(H, m) = E(m, H)h(H,m)=E(m,H). Then da resulting h(\cdot,\cdot)h(⋅,⋅) is not collision resistant: to build a collision (H,m)(H,m) and (H’,m’)(H’,m’) claim random (H,m,m’)(H,m,m’) and construct H’H’ as follows:

which   of the following does   authentication  aim to accomplish?

Assume that a TLS connection has been established successfully between a client and a server. Establishing the session included checking the server certificate and executing a DiffieHelmann exchange, but the client did not provide a client certificate. Further, assume that the client and server are honest, that the client and server don’t leak their keys, and that the cryptography is good. Which of the following attacks does TLS protect against?
1. An attacker stealing the server’s private key and reading the plaintext of recorded past connections.
2. An attacker breaking into a certificate authority and creating a fake certificate for the server.

assume   that a   tls   connection   has  been   established  successfully   between   a   client   and a server. establishing  the session   included checking   the server  certificate  and executing  a   diffiehelmann  exchange,  but the client  didnt  provide   a client  certificate.   further,  assume  that  the  client   and   server   are honest,   that  ther   client  and  server don’t   leak  their   keys,   and   that  the  cryptography   is  good. which  of the   following attacks  doens   tls   protect against?
1.  an attacker   stealing the server’s  private key and   reading  the   plaintext   of recorded  past   connections.
2. an   attacker  breaking   into   a   certificate   authority   and creating   a  fake   certificate for  tjhe  server.

Assume dat a TLS connection has been established successfully between a client and a server. Establishing da session included checkin the server certificate and executing a DiffieHelmann exchange, but da client did not provide a client certificate. Further, assume dat the client and server r honest, dat the client and server don’t leak their keys, and dat the cryptography is gud. Which of da following attacks does TLS protect against?
1. An attacker stealin the server’s private key and reading da plaintext of recorded past connections.
2. An attacker breakin into a certificate authority and creating a fake certificate fa the server.

A hash function guarantees the integrity of a message. It guarantees that the message has not be

a  hash   function  guarantees   thge   integrity  of  a   message. it   guarantees that  the   message  hasn't  be

A hash function guarantees da integrity of a msg. It guarantees dat the txt has not be

Statement 1| U2F is a stronger second factor than sending an SMS code to a user’s smartphone. Statement 2| An attacker that knows a user’s password can easily guess the U2F key to access the user’s account.

statment  1|   u2f   is a stronger  second   factor  than  sending   an   sms code  to  a   user’s   smartphone. statement 2| an attacker that knwos  a user’s password  can   easily guess  the   u2f  key to   access the  user’s account.

Statement 1| U2F is a stronger second factor den sending an SMS code to a user’s smartphone. Statement 2| An attacker dat knows a user’s password can easily guess da U2F key to access da user’s account.

The openSSL implementation described in “Remote Timing Attacks are Practical” (by Brumley and Boneh) uses the following performance optimizations: Chinese Remainder (CR), Montgomery Representation (MR), Karatsuba Multiplication (KM), and Repeated squaring and Sliding windows (RS). Which of the following options would close the timing channel attack described in the paper if you turned the listed optimizations off?
1. CR, MR, KM, and RS.
2. RS

the   openssl   implementation described   in  “remote   timing   attacks  are   practical”   (by  brumley and  boneh)  uses   the  following  performance optimizations:   chinese   remainder (cr),  montgomery  representation (mr), karatsuba  multiplication   (km),  and   repeated   squaring  and  sliding  windows   (rs). which of the  following options  would close   the  timing   channel  attack  described   in the   paper if you  turned the listed  optimizations   off?
1.  cr,  mr,   km, and   rs.
2. rs

The openSSL implementation described in “Remote Timing Attacks r Practical” (by Brumley and Boneh) uses da following performance optimizations: Chinese Remainder (CR), Montgomery Representation (MR), Karatsuba Multiplication (KM), and Repeated squaring and Slidin windows (RS). Which of da following options would close da timing channel attack described in da paper if youu turned da listed optimizations offf?
2. RS

___________ is a process of wireless traffic analysis that may be helpful for forensic investigations or during troubleshooting any wireless issue.

___________ is  a   process  of  wireless traffic   analysis that   may   be helpfull for forensic  investigations or during  troubleshooting  any  wireless  issue.

___________ is a process of wireless traffic analysis dat may b helpful fa forensic investigations or durin troubleshooting any wireless issue.

Which of the following styles of fuzzer is more likely to explore paths covering every line of code in the following program?

which   of   the  following styles  of  fuzzer  is more likely  to   explore   paths covering every   line of code in the following program?

Which of da following styles of fuzzer is more likely to explore paths covering every line of code in da following program?

1. An attacker replaying bytes that a client sent earlier.
2. An attacker impersonating the server.

assume   that  a  tls   connection has  been   established   successfully  between   a client   and a   server. establishing   the session   included checking   the  server   certificate and  executing   a diffiehelmann  exchange,  but   the   client didn't provide  a client  certificate.   further,  assume  that the   client  and  server  are honest,   that   the   client   and server don’t   leak  their   keys, and   that the  cryptography is good. which   of   hten   following attacks  doens  tls protect  against?
1. an  attacker replaying   bytes that a  client sent earlier.
2. an  attacker   impersonating   the  server.

1. An attacker replaying bytes dat a client sent earlier.
2. An attacker impersonating da server.

MIT’s Kerberos KDC server has a maximum ticket lifetime of 24 hours (for most user principals). What ensures that an expired Kerberos ticket can no longer be used?

mit’s kerberos   kdc   server  has  a   maximum ticket   lifetime   of 24  hours (for  most user   principals).   what  ensures  that  an   expired  kerberos   ticket   can no  longer   be unsed?

MIT’s Kerberos KDC server has a maximum ticket lifetime of 24 hrs (fir most user principals). Wat ensures dat an expired Kerberos ticket can no longer b used?

In Message Condentiality, the transmitted message must make sense to only intended

in   message condentiality,  the   transmitted  message  must  make sense  to  only   intended

In Txt Condentiality, da transmitted txt must make sense to only intended

______________ is a widespread app’s coding mistake made by developers which could be exploited by an attacker for gaining access or malfunctioning your system.

______________ is   a widespread app’s  coding   mistake   made   by  developers  whihc  could   be   exploited by an attacker for  gaining  access or  malfunctioning your  system.

______________ is a widespread app’s coding mistake made by developers which could b exploited by an attacker fa gaining access or malfunctioning yo system.

Consider the paper Native Client: A Sandbox for Portable, Untrusted x86 Native Code by Yee et al. Ben Bitdiddle notes that NaCl uses Intel x86 segmentation to ensure that the sandboxed module does not read or write memory outside its own data area, and does not execute instructions outside its own code. Ben thinks that with these restrictions alone, executing the sandboxed module must be safe; that is, he thinks validation is not needed. Ben is wrong. Circle the types of x86 machine instructions that the validator always forbids in sandboxed code. Please ignore trampoline and springboard code.

consider   the paper  native   client:  a  sandbox  for portable,   untrusted  x86  native   code   by   yee   et   al. ben  bitdiddle notes  that  nacl   uses   intel  x86   segmentation   to  ensure   that the  sandboxed module  doesn't  read or write  memory   outside its   own data  area, and doesn't execute   instructions outside  its   own code.  ben   thinks that with  these   restrictions   alone,  executing  tjhe  sandboxed  module   must   be  safe; that  is, he thinks validation   isn't needed. ben   is   wrong.  circle the  types  of x86   machine instructions  that   the   validator  always forbids in  sandboxed   code.  please  ignore   trampoline  and   springboard  code.

Consider da paper Native Client: A Sandbox fa Portable, Untrusted x86 Native Code by Yee et al. Ben Bitdiddle notes dat NaCl uses Intel x86 segmentation to ensure dat the sandboxed module does not read or write memory outside its own data area, and does not execute instructions outside its own code. Ben thinks dat with dem restrictions alone, executing da sandboxed module must b safe; dat is, he thinks validation is not needed. Ben is wrong. Circle da types of x86 machine instructions dat the validator always forbids in sandboxed code. Plz ignore trampoline and springboard code.

Consider the paper Native Client: A Sandbox for Portable, Untrusted x86 Native Code by Yee et al. Ben Bitdiddle notes that NaCl uses Intel x86 segmentation to ensure that the sandboxed module does not read or write memory outside its own data area, and does not execute instructions outside its own code. Ben thinks that with these restrictions alone, executing the sandboxed module must be safe; that is, she thinks validation is not needed. Ben is wrong. Circle the types of x86 machine instructions that the validator always forbids in sandboxed code. Please ignore trampoline and springboard code.

____________ is also a part of darknet that is employed for transferring files anonymously.

____________ is also   a  part of darknet  that's  employed for transferring   files   anonymously.

____________ is also a part of darknet dat is employed fir transferring files anonymously.

Why apps developed in languages like C, C++ is prone to Buffer-overflow?

why  apps developed  in   languages like  c, c++   is   prone   to  buffer-overflow?

Man in the middle attack can endanger the security of Diffie Hellman method if two parties are not

man  in  the   middle  attack  can  endanger   the   security   of diffie  hellman   method   if two  parties are  not

Man in da middle attack can endanger da security of Diffie Hellman method if 2 parties r not

Let HH be a Merkle-Damgard hash function is H:X^{\leq L} \to TH:X^≤L  →T. Construct a MAC from this HH as follows: \ \ S(k,m) = H(k \| m)  S(k,m)=H(k∥m). This mac is insecure because:

let  hh   be   a  merkle-damgard  hash function   is   h:x^{\leq l} \to  th:x^≤l →t. construct  a   mac from this  hh  as  follows:  \  \   s(k,m) =  h(k   \|   m)   s(k,m)=h(k∥m).   this  mac is   insecure because:

Let HH b a Merkle-Damgard hash function is H:X^{\leq L} \to TH:X^≤L  →T. Construct a MAC from dis HH as follows: \ \ S(k,m) = H(k \| m)  S(k,m)=H(k∥m). Dis mac is insecure cuz:

Suppose that Alice and Bob sent confidential text messages to one another last month through an encrypted messaging system. Alice and Bob are worried that an adversary might compromise one of their computers today, while they are taking the 6.858 final exam, and would then be able to decrypt those messages. Which of the following security properties can address Alice and Bob’s concern?

suppose   that  alice  anbd   bob sent  confidential   text  messages   to   one another   last   month   through  an  encrypted   messenging system.   alice   and   bob are   worried  that  an adversary might compromise one  of  their   computers   today,  while  tehy're  taking   the 6.858 final   exam,  and would  then be   able   to decrypt   those messages.  which of  the following   security   properties can address alice and bob’s  concern?

Suppose dat Alice and Bob sent confidential txt messages to one anotha last month thru an encrypted messaging system. Alice and Bob r worried dat an adversary mite compromise one of their computers todayy, while they r taking da 6.858 final exam, and would then b able to decrypt those messages. Which of da following security properties can address Alice and Bob’s concern?

The AH Protocol provides source authentication and data integrity, but not

the  ah   protocol   provides   source authentication and   data   integrity,   but not

_______________ is the central node of 802.11 wireless operations.

_______________  is  the central  node   of   802.11  wireless   operations.

_______________ is da central node of 802.11 wireless operations.

what   does it   mean   to  "be  stealthy"   during a  penetration  test?

whihc   of the   following  isn't   a transport   layer   vulnerability?

In Brumley and Boneh’s paper on side-channel attacks, why does blinding prevent the timing attack from working?

in brumley   and boneh’s   paper on   side-channel attacks, why  does blinding   prevent  hten   timing  attack from   working?

In Brumley and Boneh’s paper on side-channel attacks, y does blinding prevent da timing attack from workin?

1. RS and KM
2. RS and MR

the openssl  implementation  described  in “remote   timing   attacks are  practical” (by brumley   and  boneh)   uses  the following  performance  optimizations:   chinese  remainder  (cr), montgomery   representation (mr),   karatsuba   multiplication   (km),   and repeated  squaring   and sliding  windows  (rs).   which  of  the following  options would   close   the  timing   channel attack   described  in the  paper   if   you turned the  listed   optimizations   off?
1. rs   and   km
2. rs  and  mr

The openSSL implementation described in “Remote Timing Attacks r Practical” (by Brumley and Boneh) uses da following performance optimizations: Chinese Remainder (CR), Montgomery Representation (MR), Karatsuba Multiplication (KM), and Repeated squaring and Slidin windows (RS). Which of da following options would close da timing channel attack described in da paper if u turned da listed optimizations offf?
1. RS and KM
2. RS and MR

Public key encryption is advantageous over Symmetric key Cryptography because of

public key  encryption is  advantageous  over   symmetric key   cryptography  because of

Public key encryption is advantageous ova Symmetric key Cryptography b/c of

The __________ was a huge marketplace of Dark Web specifically famous for selling of illegal drugs & narcotics as well as you can find a wide range of other goods for sale.

the   __________  was  a  huge  marketplace   of  dark web   specifically   famous for   selling of illegal  drugs &  narcotics as well  as  you   can   find  a   wide   range  of other   goods  for  sale.

The __________ was a bigass marketplace of Dark Web specifically famous fir selling of illegal drugs & narcotics as well as youu can find a wide range of other goods fa sale.

The ______________ is categorized as an unknown segment of the Deep Web which has been purposely kept hidden & is inaccessible using standard web browsers.

the  ______________ is   catagorized   as an unknown segment  of   the  deep web   which  has been   purposely  kept   hidden &  is  inaccessible   using   standard   web   browsers.

The ______________ is categorized as an unknown segment of da Deep Web which has been purposely kept hidden & is inaccessible usin standard web browsers.

What does EXE do when the STP solver times out on a constraint query for a particular path?

what  does   exe do  when  the  stp solver  times   out   on   a constraint  query  for  a particular  path?

What does EXE do when da STP solver times outt on a constraint query fa a particular path?

Suppose you want to use fuzzing on a program to try to find memory errors; which of the following statements is true?

suppose  you want  to   use  fuzzing  on  a   program to   try to find   memory   errors;   which of the  following  statements   is true?

Suppose youu want to use fuzzing on a program to try to find memory errors; which of da following statements is tru?

Based on the paper “SoK: SSL and HTTPS: Revisiting past challenges and evaluating certificates trust model enhancements”, which of the following statements are false?

based   on the  paper   “sok: ssl   and  https: revisiting past  challenges  and   evaluating certificates   trust model  enhancements”,   which  of   the  following statements are false?

Based on da paper “SoK: SSL and HTTPS: Revisiting past challenges and evaluating certificates trust model enhancements”, which of da following statements r false?

Suppose Unix did not provide a way of passing file descriptors between processes, but still allowed inheriting file descriptors from a parent on fork and exec. What aspects of the OKWS design would break without file descriptor passing?
1. It would be impossible for services to get a TCP connection to the client web browser.
2. It would be impossible for okd to run as a non-root user.

suppose  unix didn't  provide a way of  passing file descriptors   between  processes,   but  still   allowed inheriting file  descriptors   from a  parent on   fork and  exec.  what   aspects  of  the   okws   design would  break without  file  descriptor  passing?
1. it'd  be impossible   for   services   to   get  a   tcp   connection  to   the  client   web  browser.
2. it'd be impossible for  okd to run as  a   non-root   user.

Suppose Unix did not provide a way of passin file descriptors between processes, but still allowed inheriting file descriptors from a parent on fork and exec. Wat aspects of da OKWS design would break w/o file descriptor passin?
1. It would b impossible fir services to get a TCP connection to da client web browser.
2. It would b impossible fa okd to run as a non-root user.

Failed sessions allow brute-force attacks on access credentials. This type of attacks are done in which layer of the OSI model?

failed sessions allow  brute-force  attacks   on  access   credentials.  this  type   of  attacks  are done in  which  layer of the   osi  model?

Failed sessions allow brute-force attacks on access credentials. Dis type of attacks r done in which layer of da OSI model?

Let I = (S,V)I=(S,V) be a MAC. Suppose S(k,m)S(k,m) is always 5 bits long. Can this MAC be secure?

let i =  (s,v)i=(s,v)   be  a  mac. suppose  s(k,m)s(k,m) is   always 5 bits long.  can  htis   mac  be  secure?

Let I = (S,V)I=(S,V) b a MAC. Suppose S(k,m)S(k,m) is always 5 bits long. Can dis MAC b secure?

Which of the following deals with network intrusion detection and real-time traffic analysis?

which  of the   following deals   with  network  intrusion detection   and  rela-time   traffic   analysis?

Which of da following deals witt network intrusion detection and real-time traffic analysis?

The Message condentiality or privacy means that the sender and the receiver expect

the   message   condentiality or   privacy   means  that the  sender  adn   the receiver   expect

The Txt condentiality or privacy means dat the sender and da receiver expect

When a wireless user authenticates to any AP, both of them go in the course of four-step authentication progression which is called _____________

when  a wireless  user  authenticates  to  any  ap,   both  of  them   go   in   tje  course  of   four-step   authentication  progression   which is  called  _____________

When a wireless user authenticates to any AP, both of em go in da course of four-step authentication progression which is called _____________

Which of the following are most vulnerable to injection attacks?

which of   the  following are   most vulnerable  to   injection attacks?

1. An attacker replacing bytes sent by a client with bytes of the attacker’s own choosing.
2. An attacker reading the plaintext bytes sent by a client.

asume   that   a   tls connection  has  been  established successfully between a  client  and a server. establishing the session  included checking  the server   certificate and  executing a   diffiehelmann exchange, but the  client   didn't provide  a   client certificate. further,  assume that   the client  and server  are honest,  that the   client  and server  don’t   leak  their   keys,  and  that   tghe   cryptography  is   good.   which  of the following attacks   does  tls  protect   against?
1.   an   attacker   replacing   bytes  sent   by  a   client iwth bytes of  the   attacker’s  own   choosing.
2.   an  attacker reading  the  plaintext   bytes   sent   by   a  client.

1. An attacker replacing bytes sent by a client w bytes of da attacker’s own choosing.
2. An attacker reading da plaintext bytes sent by a client.

which   of   the following   is   a wireless   traffic   sniffing   tool?

A ___________ is a method in which a computer security mechanism is bypassed untraceable for accessing the computer or its information.

a  ___________ is a method   in   which a   computer   security mechanism   is   bypassed untraceable for   accessing the  computer or  its information.

A ___________ is a method in which a computer security mechanism is bypassed untraceable fir accessing da computer or its information.

which of the follwoing   isn't a block cipher   operating   mode?

Buffer-overflow may remain as a bug in apps if __________ are not done fully.

buffer-overflow  may  remain   as a   bug in apps   if  __________  aren't   done fully.

Buffer-overflow may remain as a bug in apps if __________ r not done fully.

Applications developed by programming languages like ____ and ______ have this common buffer-overflow error.

applications   developed   by programming languages   like ____ andd   ______  have this   common   buffer-overflow error.

Applications developed by programming languages like ____ and ______ have dis common buffer-overflow error.

Encryption and decryption provide secrecy, or condentiality, but not

encryption   and decryption provide  secrecy, or  condentiality,  but not

A/an ___________ is a program that steals your logins & passwords for instant messaging applications.

a/an   ___________   is  a   program  thyat steals  your   logins  &  passwords  for  instant   messaging applications.

A/an ___________ is a program dat steals yo logins & passwords fir instant messaging applications.

A sender must not be able to deny sending a message that was sent, is known as

a  sender  mustn't   be  able to deny sending a  message that was  sent,   is known   as

A sender must not b able to deny sendin a msg that was sent, is known as

Encapsulating Security Payload (ESP) belongs to which Internet Security Protocol?

encapsulating security payload  (esp)  belongs  to which internet security   protocol?

A special tool is necessary for entering the network which is _______________ that helps the anonymous internet users to access into the Tor’s network and use various Tor services.

a  special   tool  is   necessary  for entering  the network   which   is _______________  that  helps   the   anonymous internet   users  to access  into the  tor’s  network and   use   various  tor  services.

A special tool is necessary fa entering da network which is _______________ dat helps da anonymous internet users to access into da Tor’s network and use various Tor services.

How does a buffer overflow on the stack facilitate running attacker-injected code?

how  does a   buffer overflow  on   the   stack facillitate   running  attacker-injected  code?

How does a buffer overflow on da stack facilitate runnin attacker-injected code?

thge digest   created   by   a  hash   function  is   normally called   a

Let F: K \times R \to MF:K×R→M be a secure PRF. For m \in Mm∈M define E(k,m) = \big[ r \gets R,\ \text{output } \big(r,\ F(k,r) \oplus m\big)\ \big]E(k,m)=[r←R, output (r, F(k,r)⊕m) ] Is EE symantically secure under CPA?

let   f:   k \times   r   \to mf:k×r→m   be a secure prf.   for   m  \in  mm∈m define e(k,m) =  \big[ r   \gets   r,\   \text{output }   \big(r,\  f(k,r) \oplus m\big)\   \big]e(k,m)=[r←r,   output   (r,  f(k,r)⊕m)  ]  is  ee symantically  secure under   cpa?

Let FUC: K \times R \to MF:K×R→M b a secure PRF. Fir m \in Mm∈M define E(k,m) = \bigg[ r \gets R,\ \txt{output } \bigg(r,\ FUC(k,r) \oplus m\bigg)\ \bigg]E(k,m)=[r←R, output (r, FUC(k,r)⊕m) ] Is EE symantically secure under CPA?

Old operating systems like _______ and NT-based systems have buffer-overflow attack a common vulnerability.

old   operating   systems like  _______ and   nt-based   systems have buffer-overflow attack   a common   vulnerability.

Statement 1| A U2F USB dongle prevents malware on the user’s computer from stealing the user’s second factor to authenticate as that user even when the user’s computer is turned off. Statement 2| A server using U2F can reliably determine that the user who is attempting to login is indeed behind the computer that sent the login request.

statment 1|  a   u2f  usb dongle  prevents  malware  on  the  user’s  computer  from stealing  the   user’s   second   factor  to   authenticate   as   thast  user even   when   the   user’s  computer   is   turned off.  statement  2|   a   server   useing  u2f   can reliably  determine   that   the  user   who's  attempting to login is   indeed  behind   the  cmoputer   that  sent  the  login request.

Statement 1| A U2F USB dongle prevents malware on da user’s computer from stealin the user’s second factor to authenticate as dat user even when da user’s computer is turned offf. Statement 2| A server usin U2F can reliably determine dat the user who is attempting to login is indeed behind da computer dat sent da login request.

____________________ is the anticipation of unauthorized access or break to computers or data by means of wireless networks.

____________________ is  the   anticipation   of unauthorized access  or break  to computers   or  data by   means   of  wireless  networks.

____________________ is da anticipation of unauthorized access or break to computers or data by means of wireless networks.

which  of ther following are   benefits of   penetration   testing?

1. _________ framework made cracking of vulnerabilities easy like point and click.

1. _________   framework made  cracking   of vulnerabilities easy like  point   and  click.

1. _________ framework made crackin of vulnerabilities easy like point and click.

You are given a message (m) and its OTP encryption (c). Can you compute the OTP key from m and c ?

you're  given  a message  (m)   and   its  otp   encryptiion   (c).   can  you   compute the  otp   key from   m and c ?

You r given a txt (m) and its OTP encryption (c). Can u compute da OTP key from m and c ?

1. CR and MR
2. CR

the  openssl   implementation   described in  “remote timing   attacks   are   practical” (by brumley and  boneh)  uses  the  following   performance   optimizations:   chinese   remainder   (cr),   montgomery  representation  (mr),  karatsuba multiplication   (km),  and   repeated squaring   and   sliding   windows   (rs).  which   of   teh   follwoing  options   woudl   close  the  timing channel  attack decribed  in  the paper   if   you turned the  listed   optimizations   off?
1. cr   and mr
2. cr

1. CR and MR
2. CR

When the data must arrive at the receiver exactly as they were sent, its called

when  the   data   must   arrive  at   the   reciever exactly  as they were sent,   its called

When da data must arrive at da receiver exactly as they were sent, its called

What is the difference between a direct leak and a side channel?

what's   the  difference  between   a  direct leak and   a   side channel?

which  nmap  scan is   doesn't  completely open  a  tcp   connection?

Based on the paper “Click Trajectories: End-to-End Analysis of the Spam Value Chain”, which of the following statements are true? “Spammers” here refer to operators of various parts of the “spam value chain.”

based on   the   paper  “click   trajectories:   end-to-end analysis   of  the   spam  value   chain”, which  of  the following   statements are true?  “spammers” here refer  to operators   of  various  parts  of  the  “spam   value   chain.”

Based on da paper “Click Trajectories: End-to-End Analysis of da Spam Value Chain”, which of da following statements r true? “Spammers” heaa refer to operators of various parts of da “spam value chain.”

In a _____________ attack, the extra data that holds some specific instructions in the memory for actions is projected by a cyber-criminal or penetration tester to crack the system.

in   a   _____________   attack, the  extra  data   that  holds   some   specific  instructions   in  the memory for  actions is   projected   by a   cyber-criminal or  penetration   tester  to crack  the  system.

In a _____________ attack, da extra data dat holds sum specific instructions in da memory fa actions is projected by a cyber-criminal or penetration tester to crack da system.

_______________ is a popular tool used for network analysis in multiprotocol diverse network.

_______________ is a  popular tool   used  for network   analysis in  multiprotocol diverse   network.

_______________ is a popular tool used fir network analysis in multiprotocol diverse network.

___________________ is alike as that of Access Point (AP) from 802.11, & the mobile operators uses it for offering signal coverage.

___________________   is alike  as   that  of access   point  (ap)  from 802.11,  &  the   mobile operators   uses   it for  offering signal coverage.

___________________ is alike as dat of Access Point (AP) from 802.11, & da mobile operators uses it fa offering signal coverage.

A __________ is a sequential segment of the memory location that is allocated for containing some data such as a character string or an array of integers.

a   __________  is a  sequential   segment  of  the memory   location   that's allocated   for   containing  some data such  as  a  character   string  or  an  array  of integers.

A __________ is a sequential segment of da memory location dat is allocated fir containing sum data such as a character string or an array of integers.

Let suppose a search box of an application can take at most 200 words, and you’ve inserted more than that and pressed the search button; the system crashes. Usually this is because of limited __________

let suppose  a   search   box  of  an  application   can  take  at   most   200 words,  and  you’ve   inserted  more than   thyat and  pressed the   search   button; the system   crashes.  usually this is because   of  limited __________

Let suppose a search box of an application can take at most 200 words, and yu’ve inserted more den that and pressed da search button; da system crashes. Usually dis is becuz of limited __________

___________________ began to show up few years back on wireless access points as a new way of adding or connecting new devices.

___________________  began to  show up  few  years  back  on  wireless   access  points  as a  new   way   of adding or  connecting new   devices.

___________________ began to show up few yrs back on wireless access points as a new way of adding or connecting new devices.

Which among the following is the least strong security encryption standard?

which  among  the   following  is  the least strong  security encryptiion   standard?

Which among da following is da least strong security encryption standard?

Why is it that the compiler does not know the absolute address of a local variable?

why's it  that   the compiler doesnt  know   the   absolute  address  of   a   local variable?

Why is it dat the compiler does not kno the absolute address of a local variable?

which  of the  following  does   authorization aim   to  accomplish?

The message must be encrypted at the sender site and decrypted at the

the message must be   encrypted at  the sender   site  and decrypted   at  the

A _________________ may be a hidden part of a program, a separate infected program a Trojan in disguise of an executable or code in the firmware of any system’s hardware.

a   _________________ may be   a   hidden  part   of a   program, a   separate   infected   program  a   trojan  in  disguise   of  an   executable   or code in   the   firmware of  any  sytem’s  hardware.

A _________________ may b a hidden part of a program, a separate infected program a Trojan in disguise of an executable or code in da firmware of any system’s hardware.

Which of the following is not an example of presentation layer issues?

which of the folowing   isn't  an exmaple  of presentation layer  issues?

Which of da following is not an example of presentation layer issues?

1. It would be impossible for services to send messages to oklogd.
2. It would be impossible for services to get a TCP connection to a database proxy.

suppose   unix  didn't provide a   way   of  passing file  descriptors between   processes,  but still allowed inheriting  fiel  descripters  from   a   parent   on fork and exec.   what   aspects of   the okws design  would break without  file   descriptor   passing?
1.   it'd  be   impossible  for  services   to   send  messages to   oklogd.
2.  it'd  be  impossible  for services   to get  a tcp   connection  to   a  database proxy.

Suppose Unix did not provide a way of passin file descriptors between processes, but still allowed inheriting file descriptors from a parent on fork and exec. Wht aspects of da OKWS design would break w/o file descriptor passin?
1. It would b impossible fir services to send messages to oklogd.
2. It would b impossible fir services to get a TCP connection to a database proxy.

the   four   primary security principles   related to   messages   are

The ______________ can cost you money, by sending text messages from your mobile phone numbers.

the  ______________ can   cost you  moeny,   by  sending text  messages from  your  mobile   phone  numbers.

The ______________ can cost u money, by sendin text messages from ur mobile phn numbers.

Three of the following are classic security properties; which one is not?

three   of the following are  classic   security   properties;   which  one is   not?

Three of da following r classic security properties; which one is not?

B

Question: A ________________________________________________________________________________________

B

Question: Which of the following is not a type of malware?
A. Virus
B. Worm
C. Trojan
D. Spyware
Answer: D

Question: Which of the following is not a

C

A. Virus
B. Worm
C. Trojan
D. Rootkit
Answer: D

Question: Which of the following is not a type of attack?
A. Denial of service
B.

A

Question: A ____________________________________________________________________________________________________________________

A

Question: Which of da following is a common way to prevent a buffer overflow?
A. Use a compiler that detects buffer overflows
B. Use a compiler that detects buffer overflows and automatically fixes them
C. Use a compiler that detects buffer overflows and automatically fixes them and

A

A. Virus
B. Worm
C. Trojan
D. Rootkit
Answer: D

A. Denial of Service
B.

A

Question: Which of the following is a type of malware that is designed to prevent the user from accessing the computer system until a ransom is paid?
A. Worm
B. Trojan
C. Rootkit
D. Spyware
Answer: D

Question: Which of the following

B

Question: ____________ is a type of malware that is designed to block access to a computer system until a sum of money is paid.
A. Ransomware
B. Worm
C. Spyware
D. Rootkit
Answer: A

Question: __

D

Question: Which of the following is not a security threat?
A. Malware
B. Phishing
C. Social engineering
D. Denial of Service
Answer: D

A. Malware
B. Ph

A

Question: What is the most common way to prevent SQL injection?
A. Use a parameterized query
B. Use a stored procedure
C. Use a prepared statement
D. Use a dynamic query
Answer: A

A

Question: What is the most common way to prevent a cross-site scripting attack?
A. Use a web application firewall
B. Use a web application scanner
C. Use a web application monitoring tool
D. Use a web application vulnerability scanner
Answer: A

Question: What

D

Question: Which of the following is not a network layer vulnerability?
A. Unauthorized network access
B. Unauthorized network access
C. Unauthorized network access
D. Unauthorized network access
Answer: D

Question: Which of the following is not a data link layer vulnerability?

D

A. Virus
B. Worm
C. Trojan
D. Rootkit
Answer: D

B

Question: The ____________________________________________________________________________________________________________________

A

Question: Which of the following is not a block cipher operating mode?
A. ECB
B. CFB
C. CBF
D. CBC
Answer: A

A. ECB
B.

A

A. Virus
B. Worm
C. Trojan
D. Rootkit
Answer: D

A. Virus
B. Worm

D

A. Virus
B. Worm
C. Trojan
D. Spyware
Answer: D

Question: Which of the following is not a type of virus?
A. Macro virus
B. Boot

C

C

C. Man-in-the-middle
D. Brute force
Answer: D

C

B. Buffer overflow
C. Cross-site scripting
D. SQL injection
Answer: D

A.

C

Question: ____________________________________________________________________

D

A. Virus
B. Worm
C. Trojan
D. Rootkit
Answer: D

A. Virus
B. Worm

D

Question: Which of the following is a remote Trojan?
A. Troya
B. DaCryptic
C. BankerA
D. Game-Troj
Answer: D

A. Troya

B

Question: The following is a list of the most common types of attacks on web applications. Which of the following is not a type of attack?
A. Cross-site scripting
B. SQL injection
C. Cross-site request forgery
D. Session hijacking
Answer: D

C

Question: Which of the following is not a type of firewall?
A. Packet filter
B. Application gateway
C. Circuit-level gateway
D. Stateful inspection
Answer: A

A. Packet

B

Question: Which of da following is a way to prevent a replay attack?
A. Use a nonce.
B. Use a timestamp.
C. Use a MAC.
D. Use a digital signature.
Answer: A

Question: Which of da following is a way

D

Question: ____________________________________________________

B

Question: ______________________ is a type of malware that is designed to block access to a computer system until a sum of money is paid.
B. Ransomware-as-a-Service
C. Ransomware-

C

Question: What is the difference between a direct leak and a side channel?
A. A direct leak creates a denial of service by failing to free memory, while a channel frees memory as a side effect
B. A direct leak is one that is intentional, rather than by unintentional
C

C

Question: What is the difference between a virus and a worm?
A. A virus is a program that can replicate itself, whereas a worm is a program that can replicate itself and use the infected computer's resources to spread to other computers
B. A virus is a program that can replicate itself,

B

Question: What is a ________________________________________________________________________________________________________________

A

A. Virus
B. Trojan
C. Worm
D. Spyware
Answer: D

A. Packet filtering
B. Application

B

Question: The ____________ is a set of rules that a computer uses to determine whether a user can access a particular file or directory.
A. Access control list
B. Access control list
C. Access control list
D. Access control list
Answer: A

C

A

Answer: A

A. Packet

A

D

Question: Which of the following is not a security property?
A. Confidentiality
B. Integrity
C. Availability
D. Correctness
Answer: D

D

A. Virus
B. Worm
C. Trojan
D. Spyware
Answer: D

A. Virus
B. Worm

A

Question: The following are all true about the RSA cryptosystem EXCEPT:
A. It is based on the difficulty of factoring large numbers.
B. It is based on the difficulty of computing discrete logarithms.
C. It is based on the difficulty of computing square

B

Answer: D

C

B. Man-in-the-middle
C. Replay
D. Spoofing
Answer: D

B

Question: Which of da following is not a way to prevent a timing attack?
1. Use a constant time implementation of a cryptographic algorithm.
2. Use a constant time implementation of a cryptographic algorithm.
3. Use a constant time implementation of a cryptographic algorithm.
4.

A

A. Virus
B. Worm
C. Trojan horse
D. Rootkit
Answer: D

B

C

Answer: D

C

Question: Which of da following is a good way to protect against a replay attack?
A. Use a nonce
B. Use a timestamp
C. Use a MAC
D. Use a digital signature
Answer: A

Question: Which of da following is a good way to

D

A. Virus
B. Worm
C. Trojan
D. Spyware
Answer: D

B

Question: Which of da following is a common way to implement a hash function?
A. Use a block cipher in a mode of operation that does not provide confidentiality.
B. Use a block cipher in a mode of operation that does provide confidentiality.
C. Use a stream cipher

D

Question: Which of the following is a type of malware that is designed to block access to a computer system until a sum of money is paid?
B. Worm
C. Rootkit
D. Spyware
Answer: A

Question: Which of the

A

Question: __________________________________________________________

A

Question: What is the most common type of malware?
A. Virus
B. Worm
C. Trojan
D. Rootkit
Answer: B

A. Virus
B. Worm
C. Trojan

D

D. Cross-site scripting
Answer: D

Question: Which of the following is not a type of