第6章认证技术原理与应用-软考吧-您身边的软考专家-www.ruankaoba.com

第6章认证技术原理与应用

总题数：39题

【28】认证一般由标识和鉴别两部分组成。标识是用来代表实体对象的身份标志，确保实体的唯一性和可辨识性，同时与实体存在强关联。以下不适合作为实体对象身份标识的是（28）。

真题详情及解析

【16】认证是证实某事是否名副其实或者是否有效的一个过程。以下关于认证的叙述中，不正确的是（16）。

真题详情及解析

【39】信息通过网络进行传输的过程中，存在着被慕改的风险，为了解决这一安全隐患，通常采用的安全防护技术是（39）。

真题详情及解析

【39】在非安全的通信环境中，为了保证消息来源的可靠性，通常采用的安全防护技术是（39）。

真题详情及解析

【49】以下关于认证技术的描述中，错误的是（49）。

真题详情及解析

【39】信息通过网络进行传输的过程中，存在着被篡改的风险，为了解决这一安全隐患，通常采用的安全防护技术是（39）。

真题详情及解析

【7】S/Key口令是一种一次性口令生成方案，它可以对抗（7）。

真题详情及解析

【7】S/Key口令是一种一次性口令生成方案，它可以对抗（7）。

真题详情及解析

【71-75】Methods for（71）people differ significantly from those for authenticating MAChines and programs, and this is because of the major differences in the capabilities of people versus computers.Computers are great at doing（72）calculations quickly and correctly, and they have large memories into which they can store and later retrieve Gigabytes of information. Humans don't. So we need to use different methods to authenticate people. In particular, the（73）protocols we've already discussed are not well suited if the principal being uthenticated is a person(with all the associated limitations). All approaches for human authentication rely on at least one of the followings:
Something you know (eg. a password).This is the most common kind of authentication used for humans.We use passwords every day to access our systems. Unfortunately,something that you know can become something you just forgot. And if you write it down, then other people might find it.
Something you（74）(eg.a smart card).This form of human authentication removes the problem of forgetting something you know, but some object now must be with you any time you want to be authenticated. And such an object might be stolen and then becomes something the attacker has.
Something you are (eg. a fingerprint).Base authentication on something（75）to the principal being authenticated. It's much harder to lose a fingerprint than a wallet. Unfortunately,biometric sensors are fairly expensive and (at present) not very accurate.

真题详情及解析

【61】身份认证是证实客户的真实身份与其所声称的身份是否相符的验证过程。下列各种协议中，不属于身份认证协议的是（61）。

真题详情及解析