信息安全测试员一级高级技师 详细题库

网络安全专业英语基本词汇 题目预览

• 第 1 题 单选题
  The process of verifying the identity of a user or device is known as （ ）.
  • A. Authentication
  • B. Authorization
  • C. Encryption
  • D. Decryption
  解析：Authentication is the method used to confirm the identity of a user or device, ensuring that only authorized entities gain access.
• 第 2 题 单选题
  A type of cyber attack that overwhelms a network with excessive traffic to disrupt service is called （ ）.
  • A. Phishing
  • B. DDoS
  • C. Malware
  • D. Exploit
  解析：DDoS (Distributed Denial of Service) attacks flood a target with traffic from multiple sources, rendering it unavailable to legitimate users.
• 第 3 题 单选题
  A malicious program that disguises itself as legitimate software to perform harmful actions is termed a （ ）.
  • A. Virus
  • B. Worm
  • C. Trojan
  • D. Spyware
  解析：A Trojan horse appears benign but executes malicious activities when activated, such as stealing data or creating backdoors.
• 第 4 题 单选题
  The practice of assigning access rights to resources based on user roles is referred to as （ ）.
  • A. Authentication
  • B. Encryption
  • C. Decryption
  • D. Authorization
  解析：Authorization involves granting or denying permissions to resources after authentication, ensuring users only access what they are permitted.
• 第 5 题 判断题
  The term 'Vulnerability' specifically describes a flaw in a system that can be exploited by attackers.
  • A. 对
  • B. 错
  解析：A vulnerability is a weakness in a system's security that could be leveraged by threats to compromise integrity, confidentiality, or availability.
• 第 6 题 判断题
  'Phishing' attacks always occur via email and never through other communication channels.
  • A. 对
  • B. 错
  解析：Phishing can also happen via SMS (smishing), phone calls (vishing), or social media, not just email, to deceive victims into revealing sensitive information.
• 第 7 题 多选题
  Which of the following are essential components of a cybersecurity framework? （ ）
  • A. Firewall
  • B. Encryption
  • C. Authentication
  • D. Vulnerability
  • E. Phishing
  解析：Firewalls control network traffic, encryption protects data confidentiality, and authentication verifies identities; these are core security components, while vulnerability is a weakness and phishing is an attack type.
• 第 8 题 多选题
  Which of the following terms are associated with data protection methods? （ ）
  • A. Decryption
  • B. Patch
  • C. Authorization
  • D. Malware
  • E. Ransomware
  解析：Decryption reverses encryption to access data, patches fix security flaws to protect systems, and authorization manages access rights; malware and ransomware are threats, not protection methods.