7. Which of the following is not a commonly used file-hashing algorithm?
(A) SHA-224
(B) SHA-256
(C) SHA-512
(D) TLS

8. Which of the following techniques is most likely to be employed by a credit card company looking for fraudulent transactions? (A) Big data analysis (B) Network forensics (C) Script mining (D) Drive imaging

9. What is a zero-day exploit? (A) A piece of malicious code that attaches itself to another piece of code in order to replicate. (B) An attack that exploits a previously unknown vulnerability. (C) A piece of software that appears to avoid one service but that also hides another purpose. (D) Malware specifically designed to modify the operation of the operating system.

複選題10. Which of the following correctly defines phishing? (A) The use of social engineering to trick a user into responding to an e-mail to initiate a malware-based attack. (B) The use of social engineering to talk someone into revealing credentials. (C) The hacking of computer systems and networks associated with the phone company. (D) Looking over the shoulder or using a camera to view a user entering sensitive data.

11. Which of the following best defines social engineering? (A) An attempt by an attacker to discover unprotected wireless networks. (B) The targeting of high-value individuals. (C) The art of deceiving another person to reveal confidential information. (D) An attempt by an attack to gain unauthorized access through the telephone system.

12. What is the primary benefit of steganography over encryption? (A) Can hold more data securely (B) Harder to brute force the key (C) Difficulty in detecting it (D) Ease of Implementation

13. A message digest provides integrity by: (A) Providing encryption that cannot be unlocked (B) Providing a value that can be independently verified to show if the message changed. (C) Providing message confidentiality so other users cannot see the message (D) Applying a signature to the message

14. Which is an example of fault tolerance in a computer system? (A) Dual power supplies (B) RAID 5 configured disks. (C) Multiple network interface controllers (D) All of the above

15. If an attack is able to insert himself into an encrypted conversion between you and a secure web server, he has successfully executed what type of attack? (A) A Smurf attack (B) Replay attack (C) Clickjacking attack (D) Man-in-the-middle attack

16. Your entire office is passing around a PowerPoint presentation of dancing and singing hamsters. Everyone thinks it's great until the next morning when everyone's hard drives appear to have been erased. The dancing hamster file is an example of a: (A) Virus (B) Trojan (C) Rootkit (D) Exploit

17. How is near field communication like Ethernet? (A) It does not enforce security itself, but relies on higher-level protocols such as SSL. (B) It forces each endpoint to communicate through a switch. (C) It provides collision avoidance. (D) All of the above.

114年 - 114 教育部公費留學考試試題：資訊安全概論#135195

113年 - [非官方正解]113 國立清華大學_碩士班考試入學試題:資訊安全#130695

113年 - 113 教育部公費留學考試試題：資訊安全概論#125716

112年 - [非官方正解]112 國立清華大學碩士班考試入學試題_資訊安全研究所：資訊安全#130782

112年 - 112 教育部公費留學考試試題：資訊安全概論#125717

111年 - [非官方正解]111 國立清華大學碩士班考試入學試題_資訊安全研究所：資訊安全#130742

111年 - 111 教育部_公費留學考試：資訊安全概論#125712

110年 - [非官方正解]109 國立清華大學_碩士班考試入學試題_資訊安全研究所：資訊安全#130996

110年 - 110 教育部公費留學考試試題：資訊安全概論#125719

110年 - [非官方正解]110 國立清華大學碩士班考試入學試題_資訊安全研究所:資訊安全#105636