CNA Practice
← Home
Subject area

ICMP / SNMP / Security

11 questions · 9 topics

2013 Q5(a)ICMP / SNMP / SecuritySNMP· 2 marks

What is the an important difference between a request-response message and a trap message in SNMP?

managementtrap
Open question →
2013 Q5(b)ICMP / SNMP / SecurityDigital Signature· 2 marks

Explain why a message hash is used for digital signatures rather than just using the private key to encrypt the message?

hashsignatureefficiency
Open question →
2013 Q5(c)ICMP / SNMP / SecurityPublic Key Cryptography· 6 marks

Does public key cryptography alone prevent a “man-in-the-middle” attack? Explain your answer, using a diagram.

MITMPKICA
Open question →
2013 Q5(d)ICMP / SNMP / SecurityNonce· 4 marks

Explain the use of a nonce in a challenge-response protocol.

authenticationreplay
Open question →
2014 Q5(a)ICMP / SNMP / SecuritySNMP· 2 marks

You want to use SNMP to detect when a link interface goes down or comes up. Would a request-response mode or a trap mode be appropriate for this? Explain your choice.

managementtrap
Open question →
2014 Q5(b)ICMP / SNMP / SecuritySecure Email· 8 marks

Provide a detailed description of how you would provide a secure e-mail facility over SMTP. Ensure that you identify which security services you are providing. A diagram will be helpful.

PGPemail securitysignature
Open question →
2014 Q5(c)ICMP / SNMP / SecurityHash· 4 marks

I generate an MD5 message digest fingerprint of the phrase: "2012 TR3 NAAEC CNA Supp" and it produces the string 80c55979acb8198c4445c25810e4e630. I update this for next year and change this message to: "2013 TR3 NAAEC CNA Supp" What will happen to the MD5 signature? Briefly explain your answer.

hashintegrity
Open question →
2015 Q6(a)ICMP / SNMP / SecurityPing· 2 marks

Ping (ICMP) is a useful tool for debugging network problems. Give an example of how ping could be used in network testing.

ICMPtroubleshooting
Open question →
2015 Q6(b)ICMP / SNMP / SecurityTraceroute· 3 marks

Explain how Traceroute builds a list of the routers on the path from the host through the network to the destination.

ICMPdiagnostics
Open question →
2015 Q6(c)ICMP / SNMP / SecurityHash· 3 marks

In what way does a hash provide a better message integrity check than a checksum (such as the Internet checksum)?

hashchecksumintegrity
Open question →
2015 Q6(d)ICMP / SNMP / SecurityCertificate· 3 marks

Suppose certifier.com creates a certificate for foo.com. Typically, the entire certificate would be encrypted with certifier.com’s public key. True or False? Briefly explain your answer.

PKIdigital signature
Open question →