CSS MCQ

1) A sender S sends a message m to receiver R, which is digitally signed by S with its private key.
In this scenario,
one or more of the following security violations can take place.
(I) S can launch a birthday attack to replace m with a fraudulent message.
(II) A third party attacker can launch a birthday attack to replace m with a fraudulent message.
(III) R can launch a birthday attack to replace m with a fraudulent message.
Which of the following are possible security violations?
(A) (I) and (II) only
(B) (I) only
(C) (II) only
(D) (II) and (III) only
Answer : (B)
2) In a RSA cryptosystem, a participant A uses two prime numbers p=13 and q=17 to genrate her public and
private keys. If the public key of A is 35, then the privae key of A is __________.
(A) 11
(B) 13
(C ) 7
(D) 9
Answer : (A)
3) Anand digitally signs a message and sends it to Salim. Verification of the signature by Salim requires
(A) Anand’s public key
(B) Salim’s public key.
(C) Salim’s private key.
(D) Anand’s private key
Answer : (A)
4) Which of the following are used to generate a message digest by the network security protocols?
(P) RSA (Q) SHA-1 (R) DES (S) MD5
(A) P and R Only
(B) Q and R Only
(C) Q and S Only
(D) R and S only
Answer : (C)
5) Using public key cryptography, X adds a digital signature σ to message M, encrypts <M, σ>, and sends it to
Y, where it is decrypted. Which one of the following sequences of keys is used for the operations?
(A) Encryption: X’s private key followed by Y’s private key; Decryption: X’s public key followed by Y’s public key
(B) Encryption: X’s private key followed by Y’s public key; Decryption: X’s public key followed by Y’s private key
(C) Encryption: X’s public key followed by Y’s private key; Decryption: Y’s public key followed by X’s private key
(D) Encryption: X’s private key followed by Y’s public key; Decryption: Y’s private key followed by X’s public key
Answer : (D)
6) In the RSA public key cryptosystem, the private and public keys are (e,n) and (d,n) respectively,
where n=p*q and p and q are large primes. Besides, n is public and p and q are private. Let M be an integer such
that 0<M<n and Φ(n) = (p-1)(q-1). Now consider the following equations.
I. M' = Me mod n
M =(M')d mod n
II. ed ≡≡ 1mod n
III. ed ≡≡ 1mod Φ(n)
IV. M' = Me mod Φ(n)
M = (M')d mod Φ(n)
Which of the above equations correctly represent RSA cryptosystem?
(A) I and II
(B) I and III
(C) II and IV
(D) III and IV
Answer: (B)
7) Consider the following two statements:
i. A hash function (these are often used for computing digital signatures) is an injective function.
ii. Encryption technique such as DES performs a permutation on the elements of its input alphabet.
Which one of the following options is valid for the above two statements?
(A) Both are false
(B) Statement (i) is true and the other is false
(C) Statement(ii) is true and the other is false.
(D) Both are true
Answer : (C)
8) S1- MD5 is vulnerable to the Birthday attack.
S2- traceroute uses the "Destination port unreachable" ICMP error message.
S3- 3DES is a type of Public Key Encrytion Algorithm.

S4- IPv6 has a 40-byte fixed header size(without Options fields).
How many of the above statements are true?
(A) 2
(B) 3
(C) 4
(D) None of these
Answer: (B)
9) An attacker sits between customer and Banker, and captures the information from the customer
and retransmits to the banker by altering the information. This attack is called as ______.
(A) Masquerade attack
(B) Replay Attack
(C) Passive Attack
(D) Denial of service Attack
Answer : (B)
10) Encrypt the plain text Message “EXTRANET” using Transposition cipher technique with the following
key:
Using ‘Z’ as bogus character.
(A) TAXERTZENZ
(B) EXTRANETZZ
(C) EZXZTRZANZET
(D) EXTZRANZETZ
Answer : (A)
11) Which of the following encryption algorithms is based on the Fiestal struture?
(A) AES
(B) RSA
(C) DES
(D) RC4
Answer : (C)
12) The standard for certificates used on internet is
(A) X.25
(B) X.301
(C) X.409
(D) X.509
Answer : (D)
13) Which of the following attacks is a passive attack?
a. Masquerade
b. Modification of message
c. Denial of service
d. Traffic analysis
Answer: d) Traffic analysis
14) Which of the following is not a principle of data security?
a. Data Confidentiality
b. Data Integrity
c. Authentication
d. None of the above
Answer: d) None of the above
15) Consider that B wants to send a message m that is digitally signed to A. Let the pair of
private and public keys for A and B be denoted by Kx- and Kx+ for x=A,B, respectively. Let
Kx(m) represent the operation of encrypting m with a key K x and H(m) represent the message
digest. Which of the following indicates the correct way of sending the message m along with
the digital signature to A?
(A){m,KB+(H(m))}
(B) ){m,KB- (H(m))}
(C) ){m,KA-(H(m))}
(D) ){m,KA+(H(m))}
Answer : (B)

CSS MCQ

Uploaded by

Copyright:

Available Formats

CSS MCQ

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CSS MCQ

Uploaded by

Copyright:

Available Formats

1) A sender S sends a message m to receiver R, which is digitally signed by S with its private key.

(I) S can launch a birthday attack to replace m with a fraudulent message.

(III) R can launch a birthday attack to replace m with a fraudulent message.

Which of the following are possible security violations?

(A) Anand’s public key

(B) Salim’s public key.

(C) Salim’s private key.

(D) Anand’s private key

(A) P and R Only

(B) Q and R Only

(C) Q and S Only

(D) R and S only

7) Consider the following two statements:

(A) Both are false

(B) Statement (i) is true and the other is false

(C) Statement(ii) is true and the other is false.

(D) Both are true

8) S1- MD5 is vulnerable to the Birthday attack.

S3- 3DES is a type of Public Key Encrytion Algorithm.

(A) Masquerade attack

(B) Replay Attack

(C) Passive Attack

(D) Denial of service Attack

Using ‘Z’ as bogus character.

12) The standard for certificates used on internet is

13) Which of the following attacks is a passive attack?

Answer: d) Traffic analysis

14) Which of the following is not a principle of data security?

Answer: d) None of the above

(B) ){m,KB- (H(m))}

You might also like