Deck 22: Internet Security Protocols and Standards

Question 1

_____ defines a number of content formats,which standardize representations for the support of multimedia e-mail.

A)MEM
B)MIME
C)MSC
D)DKIM

Answer 1

B

Question 2

To protect the data,either the signature alone or the signature plus the message are mapped into printable ASCII characters using a scheme known as ________ or base64mapping.

A)radix-64
B)ASCII-64
C)ESP-64
D)safe mapping

Answer 2

A

Question 3

DKIM is designed to provide an e-mail authentication technique that
is transparent to the end user.

Answer 3

True

Question 4

The recipient of a message can decrypt the signature using DSS and the
sender's public DSS key.

Question 5

Transport mode provides protection primarily for lower-layer
protocols.

Question 6

DKIM has been widely adopted by a range of e-mail providers and
many Internet service providers.

Question 7

In S/MIME each conventional key is used a total of three times.

Question 8

In the case of ________ only the digital signature is encoded using base64.

A)enveloped data
B)signed and enveloped data
C)signed data
D)clear-signed data

Question 9

Search engines support HTTPS.

Question 10

The ________ function consists of encrypted content of any type and encrypted-content encryption keys for one or more recipients.

A)clear-signed data
B)signed data
C)enveloped data
D)signed and enveloped data

Question 11

MIME is an extension to the old RFC 822 specification of an Internet
mail format.

Question 12

A message store cannot be located on the same machine as the MUA.

Question 13

The result of S/MIME encrypting the digest using DSS and the sender's private DSS key is the ________.

A)digital signature
B)envelope
C)digest code
D)mail extension

Question 14

The IAB included authentication and encryption as necessary security
features in IPv6.

Question 15

Recipients without S/MIME capability can view the message content,
although they cannot verify the signature.

Question 16

SMTP is used between the message user agent and the mail submission
agent.

Question 17

As an alternative the RSA public-key encryption algorithm can be used
with either the SHA-1 or the MD5 message digest algorithm for forming signatures.

Question 18

An ADMD is an Internet e-mail provider.

Question 19

Most browsers come equipped with SSL and most Web servers have
implemented the protocol.

Question 20

MIME provides the ability to sign and/or encrypt e-mail messages.

Question 21

The _______ is a directory lookup service that provides a mapping between the name of a host on the Internet and its numerical address.

Question 22

S/MIME content-types support four new functions: enveloped data,__________,clear-signed data,and signed and enveloped data.

Question 23

The default algorithms used for signing S/MIME messages are SHA-1 and the _________.

Question 24

ESP supports two modes of use: transport and _________.

A)padding
B)tunnel
C)payload
D)sequence

Question 25

_______ is a list that contains the combinations of cryptographic algorithms supported by the client.

A)Compression method
B)Session ID
C)CipherSuite
D)All of the above

Question 26

The most complex part of TLS is the __________.

A)signature
B)message header
C)payload
D)handshake protocol

Question 27

The ______ is responsible for transferring the message from the MHS to the MS.

A)MDA
B)MS
C)MUA
D)MSA

Question 28

A benefit of IPsec is __________.

A)that it is below the transport layer and transparent to applications
B)there is no need to revoke keying material when users leave the organization
C)it can provide security for individual users if needed
D)all of the above

Question 29

If encryption is used alone,_______ is used to convert the ciphertext to ASCII format.

Question 30

The default algorithms used for encrypting S/MIME messages are the triple DES and a public-key scheme known as _______.

Question 31

The ________ is housed in the user's computer and is referred to as a client e-mail program or a local network e-mail server.

Question 32

The basic tool that permits widespread use of S/MIME is ________.

A)the domain key
B)the public-key certificate
C)the MIME security payload
D)radix-64

Question 33

The _______ field in the outer IP header indicates whether the association is an AH or ESP security association.

A)protocol identifier
B)security parameter index
C)IP destination address
D)sequence path counter

Question 34

The ________ accepts the message submitted by a message user agent and enforces the policies of the hosting domain and the requirements of Internet standards.

A)mail submission agent
B)message user agent
C)mail delivery agent
D)message transfer agent

Question 35

At its most fundamental level the Internet mail architecture consists of a user world in the form of _________.

A)MHS
B)MSA
C)MUA
D)MDA

Question 36

_________ is a specification for cryptographically signing e-mail messages,permitting a signing domain to claim responsibility for a message in the mail stream.

Question 37

A _________ is formed by taking the message digest of the content to be signed and then encrypting that with the private key of the signer.

Question 38

IPsec can assure that _________.

A)a router advertisement comes from an authorized router
B)a routing update is not forged
C)a redirect message comes from the router to which the initial packet was sent
D)all of the above

Question 39

A signed data message can only be viewed by a recipient with __________ capability.

Question 40

________ is a security enhancement to the MIME Internet e-mail format standard,based on technology from RSA Data Security.

Question 41

The SSL record protocol provides two services for SSL connection: message integrity and _________.

Question 42

IPsec provides two main functions: a combined authentication/encryption function called ___________ and a key exchange function.

Question 43

IP-level security encompasses three functional areas: authentication,confidentiality,and _________.

Question 44

A security association is uniquely identified by three parameters: security parameter index,protocol identifier,and ________________.

Question 45

The _________ is used to convey SSL-related alerts to the peer entity.