Question 1

The TLS Record Format is the same as that of the SSL Record Format.

Accepted Answer

A) True 
 B)False  True

Question 2

Two important SSL concepts are the SSL session and the SSL _________ .

Accepted Answer

connection

Question 3

The SSL Record Protocol is used before any application data is transmitted.

Accepted Answer

A) True 
 B)False  False

Question 4

The World Wide Web is fundamentally a client/server application running over the Internet and TCP/IP intranets.

Accepted Answer

A) True 
 B)False

Question 5

TLS makes use of a pseudorandom function referred to as __________ to expand secrets into blocks of data for purposes of key generation or validation.

Accepted Answer

Pseudorand

Question 6

A signature is created by taking the hash of a message and encrypting it with the sender's _________ .

Accepted Answer

The answer of A signature is created by taking the...

Question 7

ISSl/TLS includes protocol mechanisms to enable two TCP users to determine the security mechanisms and services they will use.

Accepted Answer

A) True 
 B)False

Question 8

The shared master secret is a one-time 48-byte value generated for a session by means of secure key exchange.

Accepted Answer

A) True 
 B)False

Question 9

Phase 3 completes the setting up of a secure connection of the Handshake Protocol.

Accepted Answer

A) True 
 B)False

Question 10

__________ refers to the combination of HTTP and SSL to implement secure communication between a Web browser and a Web server.

Accepted Answer

The answer of __________ refers to the combination of HTTP...

Question 11

_________ would appear to be the most secure of the three Diffie-Hellman options because it results in a temporary, authenticated key.

Accepted Answer

Ephemeral

Question 12

Microsoft Explorer originated SSL.

Accepted Answer

A) True 
 B)False

Question 13

Sessions are used to avoid the expensive negotiation of new security parameters for each connection that shares security parameters.

Accepted Answer

A) True 
 B)False

Question 14

__________ allows the client to set up a "hijacker" process that will intercept selected application-level traffic and redirect it from an unsecured TCP connection to a secure SSH tunnel.

Accepted Answer

The answer of __________ allows the client to set up...

Question 15

_________ attacks include eavesdropping on network traffic between browser and server and gaining access to information on a Web site that is supposed to be restricted.

Accepted Answer

The answer of _________ attacks include eavesdropping on network traffic...

Question 16

The encryption of the compressed message plus the MAC must increase the content length by more than 1024 bytes.

Accepted Answer

A) True 
 B)False

Question 17

Unlike traditional publishing environments, the Internet is three- way and vulnerable to attacks on the Web servers.

Accepted Answer

A) True 
 B)False

Question 18

The first element of the CipherSuite parameter is the key exchange method.

Accepted Answer

A) True 
 B)False

Question 19

The certificate message is required for any agreed on key exchange method except fixed Diffie-Hellman.

Accepted Answer

A) True 
 B)False

Question 20

Server authentication occurs at the transport layer, based on the server possessing a public/private key pair.

Accepted Answer

A) True 
 B)False

The TLS Record Format is the same as that of the SSL Record Format.

Two important SSL concepts are the SSL session and the SSL _________ .

The SSL Record Protocol is used before any application data is transmitted.

The World Wide Web is fundamentally a client/server application running over the Internet and TCP/IP intranets.

TLS makes use of a pseudorandom function referred to as __________ to expand secrets into blocks of data for purposes of key generation or validation.

A signature is created by taking the hash of a message and encrypting it with the sender's _________ .

ISSl/TLS includes protocol mechanisms to enable two TCP users to determine the security mechanisms and services they will use.

The shared master secret is a one-time 48-byte value generated for a session by means of secure key exchange.

Phase 3 completes the setting up of a secure connection of the Handshake Protocol.

__________ refers to the combination of HTTP and SSL to implement secure communication between a Web browser and a Web server.

_________ would appear to be the most secure of the three Diffie-Hellman options because it results in a temporary, authenticated key.

Microsoft Explorer originated SSL.

Sessions are used to avoid the expensive negotiation of new security parameters for each connection that shares security parameters.

__________ allows the client to set up a "hijacker" process that will intercept selected application-level traffic and redirect it from an unsecured TCP connection to a secure SSH tunnel.

_________ attacks include eavesdropping on network traffic between browser and server and gaining access to information on a Web site that is supposed to be restricted.

The encryption of the compressed message plus the MAC must increase the content length by more than 1024 bytes.

Unlike traditional publishing environments, the Internet is three- way and vulnerable to attacks on the Web servers.

The first element of the CipherSuite parameter is the key exchange method.

The certificate message is required for any agreed on key exchange method except fixed Diffie-Hellman.

Server authentication occurs at the transport layer, based on the server possessing a public/private key pair.

Introduction

Symmetric Encryption and Message Confidentiality

Public-Key Cryptography and Message Authentication

Key Distribution and User Authentication

Network Access Control and Cloud Security

Wireless Network Security

Electronic Mail Security

Ip Security

Malicious Software

Intruders

Firewalls

Filters

Exam 6: Transport-Level Security

The TLS Record Format is the same as that of the SSL Record Format.

Two important SSL concepts are the SSL session and the SSL _________ .

The SSL Record Protocol is used before any application data is transmitted.

The World Wide Web is fundamentally a client/server application running over the Internet and TCP/IP intranets.

TLS makes use of a pseudorandom function referred to as __________ to expand secrets into blocks of data for purposes of key generation or validation.

A signature is created by taking the hash of a message and encrypting it with the sender's _________ .

ISSl/TLS includes protocol mechanisms to enable two TCP users to determine the security mechanisms and services they will use.

The shared master secret is a one-time 48-byte value generated for a session by means of secure key exchange.

Phase 3 completes the setting up of a secure connection of the Handshake Protocol.

__________ refers to the combination of HTTP and SSL to implement secure communication between a Web browser and a Web server.

_________ would appear to be the most secure of the three Diffie-Hellman options because it results in a temporary, authenticated key.

Microsoft Explorer originated SSL.

Sessions are used to avoid the expensive negotiation of new security parameters for each connection that shares security parameters.

__________ allows the client to set up a "hijacker" process that will intercept selected application-level traffic and redirect it from an unsecured TCP connection to a secure SSH tunnel.

_________ attacks include eavesdropping on network traffic between browser and server and gaining access to information on a Web site that is supposed to be restricted.

The encryption of the compressed message plus the MAC must increase the content length by more than 1024 bytes.

Unlike traditional publishing environments, the Internet is three- way and vulnerable to attacks on the Web servers.

The first element of the CipherSuite parameter is the key exchange method.

The certificate message is required for any agreed on key exchange method except fixed Diffie-Hellman.

Server authentication occurs at the transport layer, based on the server possessing a public/private key pair.

Introduction

Symmetric Encryption and Message Confidentiality

Public-Key Cryptography and Message Authentication

Key Distribution and User Authentication

Network Access Control and Cloud Security

Wireless Network Security

Electronic Mail Security

Ip Security

Malicious Software

Intruders

Firewalls

Filters