Deck 17: Transport-Level Security

Question 1

The __________ approach is vulnerable to man-in-the-middle attacks.

A)Anonymous Diffie-Hellman
B)Fixed Diffie-Hellman
C)Fortezza
D)Ephemeral Diffie-Hellman

Answer 1

A

Question 2

The shared master secret is a one-time 48-byte value generated for a session by means of secure key exchange.

Answer 2

True

Question 3

_________ attacks include impersonating another user,altering messages in transit between client and server and altering information on a Web site.

A)Active
B)Passive
C)Shell
D)Psuedo

Answer 3

A

Question 4

Phase 3 completes the setting up of a secure connection of the Handshake Protocol.

Question 5

The SSL Record Protocol is used before any application data is transmitted.

Question 6

Phase _________ of the Handshake Protocol establishes security capabilities.

A)4
B)1
C)2
D)3

Question 7

ISSl/TLS includes protocol mechanisms to enable two TCP users to determine the security mechanisms and services they will use.

Question 8

The TLS Record Format is the same as that of the SSL Record Format.

Question 9

__________ provides security services between Transport Layer Protocol and applications that use TCP.

Question 10

The _________ Protocol allows the server and client to authenticate each other and to negotiate an encryption and MAC algorithm along with cryptographic keys to be used to protect data sent in an SSL Record.

Question 11

The Change Cipher Spec Protocol is one of the three SSL-specific protocols that use the SSL Record Protocol.

Question 12

The final message in phase 2,and one that is always required,is the ___________ message,which is sent by the server to indicate the end of the server hello and associated messages.

A)server_done
B)no_certificate
C)goodbye
D)finished

Question 13

With each element of the list defining both a key exchange algorithm and a CipherSpec,the list that contains the combination of cryptographic algorithms supported by the client in decreasing order of preference is the __________ .

A)CipherSuite
B)Random
C)Session ID
D)Version

Question 14

One way to classify Web security threats is in terms of the location of the threat: Web server,Web browser,and network traffic between browser and server.

Question 15

An SSL session is an association between a client and a server and is created by the ___________ .

A)Handshake Protocol
B)user
C)Spec Protocol
D)administrator

Question 16

Unlike traditional publishing environments,the Internet is three- way and vulnerable to attacks on the Web servers.

Question 17

The encryption of the compressed message plus the MAC must increase the content length by more than 1024 bytes.

Question 18

The certificate message is required for any agreed on key exchange method except fixed Diffie-Hellman.

Question 19

The World Wide Web is fundamentally a client/server application running over the Internet and TCP/IP intranets.

Question 20

The first element of the CipherSuite parameter is the key exchange method.

Question 21

A signature is created by taking the hash of a message and encrypting it with the sender's _________ .

Question 22

_________ require a client write MAC secret,a server write MAC secret,a client write key,a server write key,a client write IV,and a server write IV,which are generated from the master secret in that order.

Question 23

Two important SSL concepts are the SSL session and the SSL _________ .

Question 24

__________ provides confidentiality using symmetric encryption and message integrity using a message authentication code.

Question 25

__________ refers to the combination of HTTP and SSL to implement secure communication between a Web browser and a Web server.

Question 26

TLS makes use of a pseudorandom function referred to as __________ to expand secrets into blocks of data for purposes of key generation or validation.