Deck 8: Electronic Mail Security

Question 1

A means of generating predictable PGP session keys is needed.

Answer 1

False

Question 2

The objective of MIME Transfer Encodings is to provide reliable delivery across the largest range of environments.

Answer 2

True

Question 3

E-mail is the most common distributed application that is widely used across all architectures and vendor platforms.

Answer 3

True

Question 4

The MIME-Version field must have the parameter value 1.0 in order for the message to conform to RFCs 2045 and 2046.

Question 5

PGP has a very rigid public-key management scheme.

Question 6

The key legitimacy field is derived from the collection of signature trust fields in the entry.

Question 7

Key IDs are critical to the operation of PGP and __________ key IDs are included in any PGP message that provides both confidentiality and authentication

A)two
B)four
C)six
D)three

Question 8

The __________ enables the recipient to determine if the correct public key was used to decrypt the message digest for authentication

A)key ID of the sender's public key B.timestamp
C)filename D.leading two octets of message digest

Question 9

For the text type of body no special software is required to get the full meaning of the text aside from support of the indicated character set.

Question 10

__________ is an Internet standard approach to e-mail security that incorporates the same functionality as PGP

A)S/MIME
B)MIME
C)DKIM
D)HTTPS

Question 11

To enhance security an encrypted message is not accompanied by an encrypted form of the session key that was used for message encryption.

Question 12

Native form is a format, appropriate to the content type, that is standardized for use between systems.

Question 13

A message component includes the actual data to be stored or transmitted as well as a filename and a timestamp that specifies the time of creation.

Question 14

PGP provides confidentiality through the use of asymmetric block encryption.

Question 15

PGP provides e-mail compatibility using the __________ encoding scheme

A)radix-64
B)MIME
C)digital signature
D)symmetric block

Question 16

PGP incorporates tools for developing public-key certificate management and a public-key trust model.

Question 17

As a default, PGP compresses the message after applying the signature but before encryption.

Question 18

Only single user IDs may be associated with a single public key on the public-key ring.

Question 19

PGP provides authentication through the use of _________

A)asymmetric block encryption
B)symmetric block encryption
C)radix-64
D)digital signatures

Question 20

Each PGP entity must maintain a file of its own public/private key pairs as well as a file of private keys of correspondents.

Question 21

S/MIME cryptographic algorithms use __________ to specify requirement level

A)CAN and MUST
B)SHOULD and CAN
C)SHOULD and MIGHT
D)SHOULD and MUST

Question 22

The __________ subtype is used when the different parts are independent but are to be transmitted together.They should be presented to the receiver in the order that they appear in the mail message

A)multipart/digest
B)multipart/parallel
C)multipart/mixed
D)multipart/alternative

Question 23

PGP makes use of four types of keys: public keys, private keys, one-time session keys, and ___________ symmetric keys.

Question 24

Typically housed in the user's computer, a _________ is referred to as a client e-mail program or a local network e-mail server

A)Mail Submission Agent
B)Message Transfer Agent
C)Message Store
D)Message User Agent

Question 25

PGP provides compression using the __________ algorithm.

Question 26

The key legitimacy field, the signature trust field and the owner trust field are each contained in a structure referred to as a ___________ .

Question 27

Computed by PGP, a _________ field indicates the extent to which PGP will trust that this is a valid public key for this user; the higher the level of trust, the stronger the binding of this user ID to this key.

Question 28

E-banking, personal banking, e-commerce server, software validation and membership-based online services all fall into the VeriSign Digital ID _________

A)Class 4
B)Class 3
C)Class 1
D)Class 2

Question 29

To provide transparency for e-mail applications, an encrypted message may be converted to an ASCII string using _________ conversion.

Question 30

The _________ accepts the message submitted by a Message User Agent and enforces the policies of the hosting domain and the requirements of Internet standards

A)Message Store
B)Mail Submission Agent
C)Message Transfer Agent
D)Mail Delivery Agent

Question 31

The _________ type refers to other kinds of data, typically either uninterpreted binary data or information to be processed by a mail-based application.

Question 32

Video content will be identified as _________ type

A)GIF
B)MPEG
C)BMP
D)JPEG

Question 33

The __________ field is used to identify MIME entities uniquely in multiple contexts

A)Content-Transfer- Encoding
B)Content-ID
C)Content-Description
D)Content-Type

Question 34

The ________ MIME field is a text description of the object with the body which is useful when the object is not readable as in the case of audio data

A)Content-Type
B)Content-Description
C)Content-ID
D)Content-Transfer-Encoding

Question 35

MIME is an extension to the ________ framework that is intended to address some of the problems and limitations of the use of SMTP

A)RFC 821
B)RFC 5322
C)RFC 3852
D)RFC 4871

Question 36

The __________ MIME field describes the data contained in the body with sufficient detail that the receiving user agent can pick an appropriate agent or mechanism to represent the data to the user or otherwise deal with the data in an appropriate manner.

Question 37

__________ is a security enhancement to the MIME Internet e-mail format standard based on technology from RSA Data Security.

Question 38

The _________ transfer encoding is useful when the data consists largely of octets that correspond to printable ASCII characters.

Question 39

For the __________ subtype the order of the parts is not significant

A)multipart/mixed
B)multipart/digest
C)multipart/alternative
D)multipart/parallel

Question 40

___________ is an open-source, freely available software package for e-mail security.

Question 41

S/MIME provides the following functions: enveloped data, signed data, clear signed data, and ________ .

Question 42

A specification for cryptographically signing e-mail messages permitting a signing domain to claim responsibility for a message in the mail stream, _________ allow message recipients to verify the signature by querying the signer's domain directly to retrieve the appropriate public key and thereby confirming that the message was attested to by a party in possession of the private key for the signing domain.

Question 43

A _________ is formed by taking the message digest of the content to be signed and then encrypting that with the private key of the signer, which is then encoded using base64 encoding.

Question 44

The _________ transfer encoding, also known as radix-64 encoding, is a common one for encoding arbitrary binary data in such a way as to be invulnerable to the processing by mail-transport programs.

Question 45

The __________ is a directory lookup service that provides a mapping between the name of a host on the Internet and its numerical address.