分享到微信
信息安全工程師當(dāng)天每日一練試題地址：m.pgyzj.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：m.pgyzj.com/class/27/e6_1.html
信息安全工程師每日一練試題（2026/3/20）在線測(cè)試：m.pgyzj.com/exam/ExamDay.aspx?t1=6&day=2026/3/20
點(diǎn)擊查看：更多信息安全工程師習(xí)題與指導(dǎo)
信息安全工程師每日一練試題內(nèi)容（2026/3/20）
試題1
AES算法必須滿足的要求不正確的是（ ）
A．密碼必須可以在世界范圍內(nèi)免費(fèi)使用
B．密碼必須是沒有密級(jí)的
C．密碼系統(tǒng)支持至少64比特長的分組
D．密碼支持的密鑰長度至少為128、192和256比特查看答案
試題參考答案：C
試題2
關(guān)于公鑰證書描述不正確的是（ ）
A．公鑰證書將實(shí)體和一個(gè)公鑰綁定
B．公鑰證書可以證實(shí)公鑰的真實(shí)性
C．公鑰證書由CA頒發(fā)
D．公鑰證書不包含實(shí)體的身份信息查看答案
試題參考答案：D
試題3
近些年國密算法和標(biāo)準(zhǔn)體系受到越來越多的關(guān)注，基于國密算法的應(yīng)用也得到了快速發(fā)展。以下國密算法中，屬于分組密碼算法的是( )。
A．SM2
B．SM3
C．SM4
D．SM9查看答案
試題參考答案：C
試題4
精于算計(jì)的攻擊者在退出系統(tǒng)之前會(huì)在系統(tǒng)中制造一些后門，以方便自己下次入侵，攻擊者設(shè)計(jì)后門時(shí)通常會(huì)考慮的方法不包括（ ）
A．放寬文件許可權(quán)
B．修改系統(tǒng)的配置
C．建立個(gè)人信道
D．安裝嗅探器查看答案
試題參考答案：C
試題5
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’ type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
試題參考答案：A、D、C、B、A
試題6
強(qiáng)制訪問控制是指系統(tǒng)根據(jù)主體和客體的安全屬性，以強(qiáng)制方式控制主體對(duì)客體的訪問。以下描述正確的是（ ）
A．強(qiáng)制訪問控制的訪問機(jī)制更靈活
B．強(qiáng)制訪問控制對(duì)用戶的誤操作無效
C．強(qiáng)制訪問控制能適應(yīng)高安全等級(jí)需求，常用于軍事領(lǐng)域
D．強(qiáng)制訪問控制的實(shí)施依賴于用戶的安全意識(shí)和技能查看答案
試題參考答案：C
試題7
宏病毒和腳本惡意代碼通常使用（ ）技術(shù)來實(shí)現(xiàn)變形。
A．指令替換
B．重編譯
C．指令擴(kuò)展
D．偽指令查看答案
試題參考答案：B
試題8
PDRR模型是Protection、Detection、Recovery、Response。其中響應(yīng)(Response)的主要內(nèi)容不包括（ ）
A．防火墻技術(shù)
B．應(yīng)急策略
C．應(yīng)急機(jī)制
D．入侵過程分析查看答案
試題參考答案：A
試題9
在云計(jì)算環(huán)境下，數(shù)據(jù)泄露的一個(gè)可能原因是（ ）
A．云服務(wù)提供商內(nèi)部人員誤操作
B．云服務(wù)API接口不安全
C．?dāng)?shù)據(jù)的實(shí)際存儲(chǔ)位置可能在境外
D．虛擬機(jī)鏡像存在安全漏洞查看答案
試題參考答案：C
試題10
數(shù)字水印技術(shù)通過在多媒體數(shù)據(jù)中嵌入隱蔽的水印標(biāo)記,可以有效實(shí)現(xiàn)對(duì)數(shù)字多媒體數(shù)據(jù)的版權(quán)保護(hù)等功能。以下不屬于數(shù)字水印在數(shù)字版權(quán)保護(hù)中必須滿足的基本應(yīng)用需求的是（ ）。
A.保密性
B.隱蔽性
C.可見性
D.完整性查看答案
試題參考答案：C
信管網(wǎng)訂閱號(hào)
信管網(wǎng)視頻號(hào)
信管網(wǎng)抖音號(hào)
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請(qǐng)以權(quán)威部門公布的內(nèi)容為準(zhǔn)！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛好者、大學(xué)生提供專業(yè)、高質(zhì)量的課程和服務(wù)，解決其考試證書、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專業(yè)軟考教研傾力打造，教材和資料參編作者和資深講師坐鎮(zhèn)，通過深研歷年考試出題規(guī)律與考試大綱，深挖核心知識(shí)與高頻考點(diǎn)，為學(xué)員考試保駕護(hù)航。面授、直播＆錄播，多種班型靈活學(xué)習(xí)，滿足不同學(xué)員考證需求，降低課程學(xué)習(xí)難度，使學(xué)習(xí)效果事半功倍。
| 發(fā)表評(píng)論 查看完整評(píng)論 | |
考試信息推送