Information Security
Midterm Exam
Course Introduction
Information Security is a comprehensive course that introduces students to the fundamental principles and practices of protecting information assets. It covers core topics such as threat landscapes, risk management, cryptography, network security, authentication, access control, and security policies. Through theoretical foundations and practical case studies, students learn how to identify vulnerabilities, design secure systems, and implement defense strategies against cyber threats. The course also explores current legal, ethical, and social issues in the field, preparing students to address real-world security challenges in organizations and information systems.
Recommended Textbook
Cryptography and Network Security 6th Edition by William Stallings
Available Study Resources on Quizplus
20 Chapters
842 Verified Questions
842 Flashcards
Source URL: https://quizplus.com/study-set/3983
Page 2
Chapter 1: Overview
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80023
Sample Questions
Q1) A loss of _________ is the unauthorized modification or destruction of information. Answer: integrity
Q2) In the context of network security,___________ is the ability to limit and control the access to host systems and applications via communications links.
Answer: access control
Q3) The field of network and Internet security consists of measures to deter,prevent,detect and correct security violations that involve the transmission of information.
A)True
B)False
Answer: True
Q4) A __________ is any action that compromises the security of information owned by an organization.
A)security attack
B)security service
C)security alert
D)security mechanism
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Classical Encryption Techniques
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80022
Sample Questions
Q1) A way to improve on the simple monoalphabetic technique is to use different monoalphabetic substitutions as one proceeds through the plaintext message.The general name for this approach is ___________ .
A)rail fence cipher
B)cryptanalysis
C)polyalphabetic substitution cipher
D)polyanalysis cipher
Answer: C
Q2) The simplest transposition cipher is the _________ technique in which the plaintext is written down as a sequence of diagonals and then read off as a sequence of rows.
Answer: rail fence
Q3) With the use of symmetric encryption,the principal security problem is maintaining the secrecy of the key.
A)True
B)False
Answer: True
Q4) The most widely used cipher ever is the __________ . Answer: Data Encryption Standard (DES)
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Block Ciphers and the Data Encryption Standard
Available Study Resources on Quizplus for this Chatper
27 Verified Questions
27 Flashcards
Source URL: https://quizplus.com/quiz/80021
Sample Questions
Q1) Feistel proposed that we can approximate the ideal block cipher by utilizing the concept of a __________ cipher,which is the execution of two or more simple ciphers in sequence in such a way that the final result or product is cryptographically stronger than any of the component ciphers.
A)linear
B)permutation
C)differential
D)product
Answer: D
Q2) Greater complexity in the subkey generation algorithm should lead to greater difficulty of cryptanalysis.
A)True
B)False
Answer: True
Q3) An advantage of key-dependent S-boxes is that because they are not fixed,it is impossible to analyze the S-boxes ahead of time to look for weaknesses.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Basic Concepts in Number Theory and Finite
Fields
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80020
Sample Questions
Q1) A zero-degree polynomial is called a __________ polynomial and is simply an element of the set of coefficients.
Q2) The euclidean algorithm cannot be adapted to find the multiplicative inverse of a polynomial.
A)True
B)False
Q3) The Advanced Encryption Standard uses infinite fields.
A)True B)False
Q4) The polynomial cx)is said to be the __________ of ax)and bx)if cx)divides both ax)and bx)and any divisor of ax)and bx)is a divisor of cx).
Q5) A polynomial fx)over a field F is called __________ if and only if fx)cannot be expressed as a product of two polynomials,both over F,and both of degree lower than that of fx).
Q6) The remainder r in the division algorithm is often referred to as a __________ .
Q7) A cyclic group is always commutative and may be finite or infinite.
A)True B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Advanced Encryption Standard
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80019
Sample Questions
Q1) A polynomial mx)is called __________ if and only if mx)cannot be expressed as a product of two polynomials,both of degree lower than that of mx).
Q2) In the general structure of the AES encryption process the input to the encryption and decryption algorithms is a single _________ block.
A)32-bit
B)256-bit
C)128-bit
D)64-bit
Q3) AES processes the entire data block as a single matrix during each round using __________ and permutation.
Q4) The standard decryption round has the structure InvShiftRows,InvSubBytes,__________,InvMixColumns.
Q5) The Rijndael developers designed the expansion key algorithm to be resistant to known cryptanalytic attacks.
A)True
B)False
Q6) The cipher consists of N rounds,where the number of rounds depends on the
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Block Cipher Operation
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80018
Sample Questions
Q1) The XTS-AES mode is based on the concept of a tweakable block cipher.
A)True
B)False
Q2) The __________ mode operates on full blocks of plaintext and ciphertext,as opposed to an s-bit subset.
A)CBC
B)ECB
C)OFB
D)CFB
Q3) The XTS-AES standard describes a method of decryption for data stored in sector-based devices where the threat model includes possible access to stored data by the adversary.
A)True
B)False
Q4) The sender is the only one who needs to know an initialization vector.
A)True
B)False
Q5) The most significant characteristic of __________ is that if the same b-bit block of plaintext appears more than once in the message,it always produces the same ciphertext.
8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Random and Pseudorandom Number
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80017
Sample Questions
Q1) The Linux operating system uses _________ entropy sources for generating random numbers.
A)four
B)three
C)one
D)two
Q2) A pseudorandom number generator takes as input a fixed value called the __________ and produces a sequence of output bits using a deterministic algorithm.
A)seed
B)fixed skew
C)entropy source
D)keystream
Q3) The purpose of the __________ test is to determine whether the number of runs of ones and zeros of various lengths is as expected for a random sequence.
Q4) There are well-defined tests for determining uniform distribution and independence to validate that a sequence of numbers is random.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: More Number Theory
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80016
Sample Questions
Q1) Discrete logarithms are analogous to ordinary logarithms but are defined using __________ arithmetic.
Q2) For any integer b and a primitive root a of prime number p we can find a unique exponent i .This exponent i is referred to as the ___________ .
A)order
B)discrete logarithm
C)bijection
D)primitive root
Q3) An area of ongoing research is the development of efficient algorithms for determining if a randomly chosen large integer is a prime number.
A)True
B)False
Q4) __________ theorem states the following: If p is prime and a is a positive integer not divisible by p,then ap-1 = 1mod p).
Q5) Discrete logarithms are fundamental to the digital signature algorithm and the _________ algorithm.
Q6) Two numbers are relatively prime if their greatest common divisor is _________ .
Q7) Two numbers are __________ if their greatest common divisor is 1.
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Public-Key Cryptography and Rsa
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80015
Sample Questions
Q1) A single algorithm that will calculate the greatest common divisor gcd)of two integers and,if the gcd is 1,determine the inverse of one of the integers modulo the other,is the __________ algorithm.
Q2) "The sender 'signs' a message with its private key.Signing is achieved by a cryptographic algorithm applied to the message or to a small block of data that is a function of the message," is a description of a ___________ .
Q3) Plaintext is transformed into ciphertext using two keys and a decryption algorithm.
A)True
B)False
Q4) A public-key encryption scheme is not vulnerable to a brute-force attack.
A)True
B)False
Q5) T F` 10.If the authenticator is encrypted with the sender's private key,it serves as a signature that verifies origin,content,and sequencing.
A)True
B)False
Q6) A __________ is when two sides cooperate to exchange a session key.
To view all questions and flashcards with answers, click on the resource link above.
Page 11
Chapter 10: Other Public-Key Cryptosystems
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80014
Sample Questions
Q1) An)__________ is defined by an equation in two variables with coefficients.
A)abelian group
B)binary curve
C)cubic equation
D)elliptic curve
Q2) We use a cubic equation in which the variables and coefficients all take on values in the set of integers from 0 through p - 1 and in which calculations are performed modulo p for a __________ over Zp.
Q3) __________ can be used to develop a variety of elliptic curve cryptography schemes.
A)Elliptic curve arithmetic
B)Binary curve
C)Prime curve
D)Cubic equation
Q4) Eqa,b)is an elliptic curve with parameters a,b,and q,where _________ is a prime or an integer of the form 2m.
Q5) The __________ pseudorandom number generator is recommended in the ANSI standard X9.82 Random Number Generation)and in the ISO standard 18031 Random Bit Generation).
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Cryptographic Hash Functions
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80013
Sample Questions
Q1) The evaluation criteria for SHA-3 are security,___________,and algorithm and implementation characteristics.
Q2) Virtually all cryptographic hash functions involve the iterative use of a compression function.
A)True
B)False
Q3) Hash functions can be used for intrusion and virus detections.
A)True
B)False
Q4) A weak hash function is sufficient to protect against an attack in which one party generates a message for another party to sign.
A)True
B)False
Q5) The most important and widely used family of cryptographic hash functions is the __________ family.
Q6) The hash algorithm involves repeated use of a __________ function,f,that takes two inputs an n-bit input and a b-bit block)and produces an n-bit output.
Q7) A message authentication code is also known as a __________ hash function. To view all questions and flashcards with answers, click on the resource link above.
Page 13
Chapter 12: Message Authentication Codes
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80012
Sample Questions
Q1) Discovery of the pattern of traffic between parties is a __________ attack.
Q2) The __________ mode of operation is designed to be parallelizable so that it can provide high throughput with low cost and low latency.
A)DAA
B)CCM
C)GCM
D)CTR
Q3) An important characteristic of the MAC algorithm is that it needs to be reversible. A)True
B)False
Q4) Confidentiality can be provided by performing message encryption __________ the MAC algorithm.
A)before B)before or after C)after D)during
Q5) Message encryption by itself cannot provide a measure of authentication. A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Digital Signatures
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80011
Sample Questions
Q1) It is important in a direct digital signature to perform an outer confidentiality function first and then the signature function.
A)True
B)False
Q2) The __________ scheme minimizes the message dependent amount of computation required to generate a signature.
A)Rabin
B)SHA-1
C)ElGamal
D)Schnorr
Q3) The digital signature standard is a __________ standard that uses the secure hash algorithm.
A)IEEE
B)NIST
C)ISO
D)ITIL
Q4) The DSS approach makes use of a hash function.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: Key Management and Distribution
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80010
Sample Questions
Q1) X.509 defines the format for private-key certificates.
A)True
B)False
Q2) A __________ consists of a public key,an identifier of the key owner,and the whole block signed by a trusted third party and can be used by participants to exchange keys without contacting a public key authority in a way that is as reliable as if the keys were obtained directly from a public key authority.
Q3) __________ is the function that delivers a key to two parties who wish to exchange secure encrypted data.
Q4) __________ certificates are used in most network security applications including IP security,transport layer security and S/MIME.
Q5) A public-key certificate scheme alone does not provide the necessary security to authenticate the public key.
A)True
B)False
Q6) The directory entry for each certification authority includes two types of certificates: forward certificates and ___________ .
To view all questions and flashcards with answers, click on the resource link above.
Page 16
Chapter 15: User Authentication Protocols
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80009
Sample Questions
Q1) The __________ is unsuitable for a connectionless type of application because it requires the overhead of a handshake before any connectionless transmission effectively negating the chief characteristic of a connectionless transaction.
A)timestamp approach
B)challenge-response approach
C)simple replay approach
D)one-way authentication approach
Q2) The ticket granting ticket is encrypted with a secret key known only to the AS and the
Q3) There are four general means of authenticating a user's identity.They are: something the individual knows,something the individual possesses,something the individual is,and something the individual __________ .
Q4) A common item of authentication information associated with a user is a
A)nonce
B)timestamp
C)ticket
D)password
To view all questions and flashcards with answers, click on the resource link above.
Chapter 16: Network Access Control and Cloud Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80008
Sample Questions
Q1) _________ is a client computer that is attempting to access a network.
A)EAP peer
B)PSK
C)NAC
D)RAS
Q2) _________ defines how the TLS protocol can be encapsulated in EAP messages.
Q3) An __________ is a server computer that negotiates the use of a specific EAP method with an EAP peer,validates the EAP peer's credentials,and authorizes access to the network.
Q4) _________ is a model for enabling ubiquitous,convenient,on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.
Q5) _________ is the provision of security applications and services via the cloud either to cloud-based infrastructure and software or from the cloud to the customers' on-premise systems.
A)IaaS
B)PaaS
C)SaaS
D)SecaaS
Page 18
To view all questions and flashcards with answers, click on the resource link above.
Chapter 17: Transport-Level Security
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80007
Sample Questions
Q1) TLS makes use of a pseudorandom function referred to as __________ to expand secrets into blocks of data for purposes of key generation or validation.
Q2) The TLS Record Format is the same as that of the SSL Record Format.
A)True
B)False
Q3) The certificate message is required for any agreed on key exchange method except fixed Diffie-Hellman.
A)True
B)False
Q4) With each element of the list defining both a key exchange algorithm and a CipherSpec,the list that contains the combination of cryptographic algorithms supported by the client in decreasing order of preference is the __________ .
A)CipherSuite
B)Random
C)Session ID
D)Version
Q5) __________ provides confidentiality using symmetric encryption and message integrity using a message authentication code.
To view all questions and flashcards with answers, click on the resource link above. Page 19
Chapter 18: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80006
Sample Questions
Q1) The IEEE 802.11 protocol stack consists of the logical link control layer,the medium access control layer,and the _________ layer.
Q2) The DS can be a switch,a wired network,or a wireless network.
A)True
B)False
Q3) The __________ layer is responsible for detecting errors and discarding any frames that contain errors.
Q4) The __________ is the information that is delivered as a unit between MAC users.
A)MSDU
B)DS
C)MPDU
D)BSS
Q5) IEEE 802.11 defines seven services that need to be provided by the wireless LAN to achieve functionality equivalent to that which is inherent to wired LANs.
A)True
B)False
Q6) The __________ function is the logical function that determines when a station operating within a BSS is permitted to transmit and may be able to receive PDUs.
To view all questions and flashcards with answers, click on the resource link above. Page 20
Chapter 19: Electronic Mail Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80005
Sample Questions
Q1) PGP provides confidentiality through the use of asymmetric block encryption.
A)True
B)False
Q2) The key legitimacy field is derived from the collection of signature trust fields in the entry.
A)True
B)False
Q3) As a default,PGP compresses the message after applying the signature but before encryption.
A)True
B)False
Q4) PGP provides compression using the __________ algorithm.
Q5) Typically housed in the user's computer,a _________ is referred to as a client e-mail program or a local network e-mail server.
A)Mail Submission Agent
B)Message Transfer Agent
C)Message Store
D)Message User Agent
Q6) ___________ is an open-source,freely available software package for e-mail security.
Page 21
To view all questions and flashcards with answers, click on the resource link above.
Chapter 20: Ip Security
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80004
Sample Questions
Q1) The means by which IP traffic is related to specific SAs is the _________ .
A)TRS
B)SPD
C)SAD
D)SPI
Q2) Authentication makes use of the _________ message authentication code.
Q3) By implementing security at the IP level an organization can ensure secure networking not only for applications that have security mechanisms but also for the many security ignorant applications.
A)True
B)False
Q4) The key management mechanism that is used to distribute keys is coupled to the authentication and privacy mechanisms only by way of the _________ .
A)IAB
B)SPI
C)ESP
D)SPD
Q5) IPsec encompasses three functional areas: authentication,key management,and
To view all questions and flashcards with answers, click on the resource link above. Page 22