Network Security Concepts Quiz

A cipher device used in the 20th century for secret communication.

Same inputs lead to different outputs in encryption.

A symmetric encryption algorithm, iterates on operations (SubBytes etc.).

Substitution cipher component of AES, uses a look-up table (S-box).

8x8 substitution table (S-box) used in AES.

Methods for processing data blocks in block ciphers.

A block cipher mode where each block influences the next.

A block cipher mode that encrypts each block independently; Not Probabilistic

A security method that requires multiple authentication factors from the user (something the user knows, has, or is) to gain access.

Methods used to verify a user's identity, such as something the user knows (password), has (ID card), or physically is (biometrics).

A password storage technique that adds a random value (salt) to the password before hashing. This makes brute-force and dictionary attacks more difficult.

A tool used to crack passwords by trying different combinations.

The method of saving passwords in a secure way to prevent unauthorized access.

A hashing algorithm.

When a biometric system incorrectly identifies a different person's sample as the same person during verification.

User authentication relying on only one factor, such as a password.

Rules and policies that dictate how users or processes can access system resources based on their identity and permissions.

A model where the resource owner specifies which subjects (users or processes) can access specific resources.

A model where the system enforces access control based on predefined security policies and labels, limiting user discretion.

The TCP/IP model organizes network communication into five layers: Application, Transport, Internet, Network Access, and Physical.

A cryptographic method for securely exchanging keys over an insecure channel, using public and private keys.

The probability of a legitimate user being incorrectly rejected by a biometric system.

The probability of an unauthorized user being incorrectly accepted by a biometric system.

A model where access rights are based on attributes of the user, the requested resource, and the current environment.

A model where users control access to resources that they own, setting permissions based on individual identity.

A model where access rights are defined based on the user's role within an organization.

A model where access rights are based on security labels assigned to resources and users.

The permission settings for a directory, representing owner (d), group (r), and others (x) rights: read, write, and execute.

A Linux command used to set default file permissions for newly created files and directories.

A set of rules that computers use to communicate on the internet.

A process of establishing a secure connection between a client and a server.

A protocol that allows devices to automatically get their IP address from a network.

A number used to control the default permissions for files and directories created.

A way of representing file permissions in the form of three digits, each digit representing owner, group, and others.

The permissions granted to new directories by default, often rwxrwxrwx.

The process of changing the permissions granted to a directory, usually by modifying the default.

Uses two separate keys: a public key for encryption and a private key for decryption. This makes it possible to securely communicate without sharing a secret key beforehand.

Contains a public key and the owner's identity, digitally signed by a trusted third party (certificate authority). It proves the authenticity and validity of the public key.

A cryptographic method used to verify the authenticity and integrity of a message. It uses the sender's private key to sign the message and the receiver's public key to verify it.

A trusted third party that issues and manages digital certificates. It verifies the identity of individuals or organizations and serves as an intermediary to ensure trust in online transactions.

Symmetric key cryptography uses a single shared secret key for both encryption and decryption, while public-key cryptography uses a separate public key for encryption and a private key for decryption.

Public-key cryptography allows secure key exchange without the need for pre-shared secrets, making it more secure for distributing keys over insecure channels. In contrast, symmetric key cryptography requires secure key distribution, which can be a challenge.