Exam (elaborations)
CS 6262 Study Questions with 100% Correct Answers
- Course
- Institution
CS 6262 Study Questions with 100% Correct Answers
[Show more]
Seller
Follow
Content preview
CS 6262 Study Questions with 100%Correct Answers
With certificate transparency, one can use the log published by a CA to verify that
a certificate is indeed issued by the CA. - ANSWER True
The random sequence number in the SYN/ACK packet can prevent an attacker
from establishing a TCP session but cannot prevent him from launching a DoS
attack. - ANSWER True
Using ARP spoofing an attacker can cause traffic to a gateway to instead be sent to
his machine (on the same LAN). - ANSWER True
Incorrect BGP advertisements by a node can be detected by other nodes and
therefore the incorrect advertisements will not be propagated. - ANSWER False
In Kaminsky's Poisoning attack, the attacker floods the local resolver with
responses that point the name server of a domain (e.g., www.gatech.edu) to his
machine. - ANSWER True
DNSSEC relies on a public-key infrastructure (PKI). - ANSWER True
If a program is packed (i.e., encrypted and compressed), it must be a malware. -
ANSWER False
, It is impossible to achieve absolute, complete transparency in malware analysis
because, e.g., malware can use network timing to detect the analyzer (because
traffic goes through the analyzer, which can cause additional delay). - ANSWER True
If emulator-based obfuscation is in use, the system calls produced by running the
"malware" are from the emulator program and cannot be easily analyzed to reveal
the original malware logic. - ANSWER True
If you download apps from only the official app store, your phone will be free of
mobile malware. - ANSWER False
In malware analysis, dynamic fuzzing is useful when symbolic execution fails to
yield results quickly. - ANSWER True
All data privacy issues in cloud computing can be solved by just encrypting data in
transmission (over the Internet) and at rest (stored in the Cloud). - ANSWER False
It's important and challenging to understand the memory layouts of data structures of
the operating system and applications in the guest virtual machine for virtual
machine monitoring. - ANSWER True
One drawback of virtual machine monitoring is a high overhead (time). - ANSWER True
The use of property-preserving encryption can lead to privacy leakage (e.g., revealing
a user's gender and even identity). - ANSWER True
If we don't trust the cloud provider, e.g., we believe it will observe our data access
patterns to find out what we are doing, then there is nothing we can do other than not
using the cloud provider. - ANSWER False
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller KenAli. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.24. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
77254 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now