Deck 19: Electronic Mail Security

Question 1

E-mail is the most common distributed application that is widely used across all architectures and vendor platforms.

Answer 1

True

Question 2

Key IDs are critical to the operation of PGP and __________ key IDs are included in any PGP message that provides both confidentiality and authentication.

A)two
B)four
C)six
D)three

Answer 2

A

Question 3

PGP incorporates tools for developing public-key certificate management and a public-key trust model.

Answer 3

True

Question 4

The __________ enables the recipient to determine if the correct public key was used to decrypt the message digest for authentication.

A)key ID of the sender's public key
B)timestamp
C)filename
D)leading two octets of message digest

Question 5

PGP provides authentication through the use of _________ .

A)asymmetric block encryption
B)symmetric block encryption
C)radix-64
D)digital signatures

Question 6

__________ is an Internet standard approach to e-mail security that incorporates the same functionality as PGP.

A)S/MIME
B)MIME
C)DKIM
D)HTTPS

Question 7

The objective of MIME Transfer Encodings is to provide reliable delivery across the largest range of environments.

Question 8

To enhance security an encrypted message is not accompanied by an encrypted form of the session key that was used for message encryption.

Question 9

Only single user IDs may be associated with a single public key on the public-key ring.

Question 10

Native form is a format,appropriate to the content type,that is standardized for use between systems.

Question 11

A means of generating predictable PGP session keys is needed.

Question 12

As a default,PGP compresses the message after applying the signature but before encryption.

Question 13

PGP provides e-mail compatibility using the __________ encoding scheme.

A)radix-64
B)MIME
C)digital signature
D)symmetric block

Question 14

A message component includes the actual data to be stored or transmitted as well as a filename and a timestamp that specifies the time of creation.

Question 15

For the text type of body no special software is required to get the full meaning of the text aside from support of the indicated character set.

Question 16

PGP provides confidentiality through the use of asymmetric block encryption.

Question 17

The key legitimacy field is derived from the collection of signature trust fields in the entry.

Question 18

Each PGP entity must maintain a file of its own public/private key pairs as well as a file of private keys of correspondents.

Question 19

PGP has a very rigid public-key management scheme.

Question 20

The MIME-Version field must have the parameter value 1.0 in order for the message to conform to RFCs 2045 and 2046.

Question 21

The ________ MIME field is a text description of the object with the body which is useful when the object is not readable as in the case of audio data.

A)Content-Type
B)Content-Description
C)Content-ID
D)Content-Transfer-Encoding

Question 22

PGP makes use of four types of keys: public keys,private keys,one-time session keys,and ___________ symmetric keys.

Question 23

The __________ field is used to identify MIME entities uniquely in multiple contexts.

A)Content-Transfer- Encoding
B)Content-ID
C)Content-Description
D)Content-Type

Question 24

The key legitimacy field,the signature trust field and the owner trust field are each contained in a structure referred to as a ___________ .

Question 25

The _________ accepts the message submitted by a Message User Agent and enforces the policies of the hosting domain and the requirements of Internet standards.

A)Message Store
B)Mail Submission Agent
C)Message Transfer Agent
D)Mail Delivery Agent

Question 26

PGP provides compression using the __________ algorithm.

Question 27

To provide transparency for e-mail applications,an encrypted message may be converted to an ASCII string using _________ conversion.

Question 28

Video content will be identified as _________ type.

A)GIF
B)MPEG
C)BMP
D)JPEG

Question 29

S/MIME cryptographic algorithms use __________ to specify requirement level.

A)CAN and MUST
B)SHOULD and CAN
C)SHOULD and MIGHT
D)SHOULD and MUST

Question 30

The _________ type refers to other kinds of data,typically either uninterpreted binary data or information to be processed by a mail-based application.

Question 31

MIME is an extension to the ________ framework that is intended to address some of the problems and limitations of the use of SMTP.

A)RFC 821
B)RFC 5322
C)RFC 3852
D)RFC 4871

Question 32

Computed by PGP,a _________ field indicates the extent to which PGP will trust that this is a valid public key for this user;the higher the level of trust,the stronger the binding of this user ID to this key.

Question 33

For the __________ subtype the order of the parts is not significant.

A)multipart/mixed
B)multipart/digest
C)multipart/alternative
D)multipart/parallel

Question 34

The __________ subtype is used when the different parts are independent but are to be transmitted together.They should be presented to the receiver in the order that they appear in the mail message.

A)multipart/digest
B)multipart/parallel
C)multipart/mixed
D)multipart/alternative

Question 35

__________ is a security enhancement to the MIME Internet e-mail format standard based on technology from RSA Data Security.

Question 36

E-banking,personal banking,e-commerce server,software validation and membership-based online services all fall into the VeriSign Digital ID _________ .

A)Class 4
B)Class 3
C)Class 1
D)Class 2

Question 37

Typically housed in the user's computer,a _________ is referred to as a client e-mail program or a local network e-mail server.

A)Mail Submission Agent
B)Message Transfer Agent
C)Message Store
D)Message User Agent

Question 38

The __________ MIME field describes the data contained in the body with sufficient detail that the receiving user agent can pick an appropriate agent or mechanism to represent the data to the user or otherwise deal with the data in an appropriate manner.

Question 39

___________ is an open-source,freely available software package for e-mail security.

Question 40

The _________ transfer encoding is useful when the data consists largely of octets that correspond to printable ASCII characters.

Question 41

The _________ transfer encoding,also known as radix-64 encoding,is a common one for encoding arbitrary binary data in such a way as to be invulnerable to the processing by mail-transport programs.

Question 42

A specification for cryptographically signing e-mail messages permitting a signing domain to claim responsibility for a message in the mail stream,_________ allow message recipients to verify the signature by querying the signer's domain directly to retrieve the appropriate public key and thereby confirming that the message was attested to by a party in possession of the private key for the signing domain.

Question 43

A _________ is formed by taking the message digest of the content to be signed and then encrypting that with the private key of the signer,which is then encoded using base64 encoding.

Question 44

The __________ is a directory lookup service that provides a mapping between the name of a host on the Internet and its numerical address.

Question 45

S/MIME provides the following functions: enveloped data,signed data,clear signed data,and ________ .