Internet Security Protocols, Wireless and Mobile Security (ch23, 22, 24)

Question 1

In IPSec, packets can be protected using ESP or AH but not both at the same time.

Answer 1

False

Question 2

In IPSec, if A uses DES for traffic from A to B, then B must also use DES for traffic from B to A.

Answer 2

True

Question 3

In IPSec, the sequence number is used for preventing replay attacks.

Answer 3

True

Question 4

Most browsers come equipped with SSL and most Web servers have implemented the protocol.

Answer 4

True

Question 5

Even web searches have (often) been in HTTPS.

Answer 5

True

Question 6

In a wireless network, traffic is broadcasted into the air, and so it is much easier to sniff wireless traffic compared with wired traffic.

Answer 6

True

Question 7

Compared with WEP, WPA2 has more flexible authentication and stronger encryption schemes.

Answer 7

True

Question 8

iOS has no vulnerability.

Answer 8

False

Question 9

In iOS, each file is encrypted using a unique, per-file key.

Answer 9

True

Question 10

In iOS, an app can run its own dynamic, run-time generated code.

Answer 10

False

Question 11

The App Store review process can guarantee that no malicious iOS app is allowed into the store for download.

Answer 11

False

Question 12

In iOS, each app runs in its own sandbox.

Answer 12

True

Question 13

In Android, all apps have to be reviewed and signed by Google.

Answer 13

False

Question 14

In Android, an app will never be able to get more permission than what the user has approved.

Answer 14

False

Question 15

Since Android is open-source, each handset vendor can customize it, and this is good for security (hint: consider security updates).

Answer 15

False

Question 16

The most complex and important part of TLS is the ________.

A. signature

B. message header

C. payload

D. handshake protocol

Answer 16

D

Question 17

_______ is a list that contains the combinations of cryptographic algorithms supported by the client.

A. Compression method

B. Session ID

C. CipherSuite

D. All of the above

Answer 17

C

Question 18

ESP supports two modes of use: transport and ________.

A. padding

B. tunnel

C. payload

D. sequence

Answer 18

B

Question 19

A benefit of IPsec is ________.

A. that it is below the transport layer and transparent to applications

B. there is no need to revoke keying material when users leave the organization

C. it can provide security for individual users if needed

D. all of the above

Answer 19

D

Question 20

The ______ field in the outer IP header indicates whether the association is an AH or ESP security association.

A. protocol identifier

B. security parameter index

C. IP destination address

D. sequence path counter

Answer 20

A

Question 21

IPsec can assure that:

A. a router advertisement comes from an authorized router.

B. A routing update is not forged.

C. A redirect message comes from the router to which the initial packet was sent.

D. All of the above

Answer 21

D

Question 22

ESP can provide both confidentiality and integrity protection.

Answer 22

True

Question 23

If the authentication option of ESP is chosen, message integrity code is computed before encryption.

Answer 23

False

Question 24

To protect the confidentiality and integrity of the whole original IP packet, we can use ESP with authentication option in tunnel mode.

Answer 24

True

Question 25

In AH, the integrity hash covers the IP header.

Answer 25

True

Question 26

The security association, SA, specifies a two-way security arrangement between the sender and receiver.

Answer 26

False

Question 27

SPI is used to help receiver identify the SA to un-process the IPSec packet.

Answer 27

True

Question 28

If the sequence number in the IPSec header is greater than the largest number of the current anti-replay window the packet is rejected.

Answer 28

False

Question 29

If the sequence number in the IPSec header is smaller than the smallest number of the current anti-replay window the packet is rejected.

Answer 29

True

Question 30

Since TLS is for the Transport Layer, it relies on IPSec, which is for the IP Layer.

Answer 30

False

Question 31

In most applications of TLS or SSL, public keys are used for authentication and key exchange.

Answer 31

True