职业资格类 - 软考

ARP协议的作用是（46），它的协议数据单元封装在（47）中传送。ARP请求是采用（48）方式发送的。
A.由MAC地址求IP地址
B.由IP地址求MAC地址
C.由IP地址查域名
D.由域名查IP地址

安全需求可划分为物理安全、网络安全、系统安全和应用安全，下面的安全需求中属于系统安全的是__(本题)__，属于应用安全的是__(下题)__
A.机房安全
B.入侵检测
C.漏洞补丁管理
D.数据库安全

数字证书采用公钥体制进行加密和解密。每个用户有一个私钥，用它进行（）
A.解密和验证
B.解密和签名
C.加密和签名
D.加密和验证

如果未经授权的实体得到了数据的访问权，这属于破坏了信息的（）。
A.可用性
B.完整性
C.机密性
D.可控性

与HTTP相比,HTTPS协议将传输的内容进行加密，更加安全。HTTPS的默认端口是（）。
A.1023
B.443
C.80
D.8080

从安全属性对各种网络攻击进行分类，篡改攻击是针对（27）的攻击。
A.机密性
B.可用性
C.完整性
D.真实性

SHA-1是（）算法，生成一个（请作答此空）比特的摘要。
A.56
B.128
C.160
D.512

人为的安全威胁包括主动攻击和被动攻击，以下属于主动攻击的是（）。
A.后门
B.流量分析
C.信息窃取
D.数据窥探

窃取是对（41）的攻击，DDos攻击破坏了（42）。
A.可用性
B.保密性
C.完整性
D.真实性

There are different ways to perform IP based DoS Attacks.The most common IP based DoS attack is that an attacker sends an extensive amount of connection establishment（本题）（e.g.TCP SYN requests）to establish hanging connections with the controller or a DPS.Such a way,the attacker can consume the network resources which should be available for legitimate users.In other（72）,the attacker inserts a large amount of（73）packets to the data plane by spoofing all or part of the header fields with random values.These incoming packets will trigger table-misses and send lots of packet-in flow request messages to the network controller to saturate the controller resources.In some cases,an（74）who gains access to DPS can artificially generate lots of random packet-in flow request messages to saturate the control channel and the controller resources.Moreover,the lack of diversity among DPSs fuels fuels the fast propagation of such attacks.Legacy mobile backhaul devices are inherently protected against the propagation of attacks due to complex and vendor specific equipment.Moreover,legacy backhaul devices do not require frequent communication with core control devices in a manner similar to DPSs communicating with the centralized controller.These features minimize both the impact and propagation of DoS attacks.Moreover,the legacy backhaul devices are controlled as a joint effort of multiple network element.For instance,a single Long Term Evilution（LTE）eNodeB is connected up to 32 MMEs.Therefore,DoS/DDoS attack on a single core element will not terminate the entire operation of a backhaul device（75）the network.
A.message
B.information
C.requests
D.date