Security in Computer Architecture: Master the Fundamentals

Question 1

Which hardware-based security mechanism is designed to mitigate cache-based side-channel attacks?

Accepted Answer

Memory Encryption Engine (MEE)

Answer

Address Space Layout Randomization (ASLR)

Answer

Control Flow Integrity (CFI)

Answer

Trusted Platform Module (TPM)

Question 2

What is the main function of Control Flow Integrity (CFI) in computer security?

Accepted Answer

Enforcing the intended execution flow of programs

Answer

Preventing buffer overflows

Answer

Detecting and thwarting memory corruption attacks

Answer

Protecting against code injection attacks

Question 3

Identify the primary role of the Trusted Platform Module (TPM) in computer security.

Accepted Answer

Combining all of the above functions

Answer

Securely storing and safeguarding encryption keys

Answer

Verifying the integrity of system boot processes

Answer

Providing secure storage for sensitive user data

Question 4

What is the intended purpose of Stack Canaries in computer security?

Accepted Answer

Detecting buffer overflows by placing a known random value on the stack

Answer

Preventing integer overflows by checking input value ranges

Answer

Protecting against format string vulnerabilities

Answer

Encrypting sensitive data stored on the stack

Question 5

Which technique is commonly exploited by malicious actors in malware attacks to take advantage of security vulnerabilities?

Accepted Answer

Buffer overflow

Answer

Phishing

Answer

Cross-site scripting

Answer

Man-in-the-middle attack

Question 6

What is the fundamental difference between symmetric and asymmetric encryption algorithms?

Accepted Answer

Symmetric algorithms utilize the same key for both encryption and decryption, while asymmetric algorithms employ different keys.

Answer

Asymmetric algorithms are inherently faster than symmetric algorithms.

Answer

Symmetric algorithms provide superior security compared to asymmetric algorithms.

Answer

Asymmetric algorithms are primarily used for mass encryption, whereas symmetric algorithms are applied for message authentication.

Question 7

Which secure hashing algorithm is extensively utilized in the context of digital signatures?

Accepted Answer

SHA-256

Answer

SHA-1

Answer

MD5

Answer

CRC32

Question 8

What is the primary objective of a firewall in a computer security context?

Accepted Answer

Regulating and filtering network traffic based on predetermined rules

Answer

Detecting and blocking malicious software

Answer

Encrypting data transmitted across the network

Answer

Providing secure remote access to systems

Question 9

What is the main purpose of a firewall?

Accepted Answer

To prevent unauthorized access to a network

Answer

To encrypt data transmissions

Answer

To detect and remove malware

Answer

To provide access control to protected resources

Question 10

Which statement accurately describes the role of memory protection units (MPUs)?

Accepted Answer

MPUs isolate different processes running on the same system, preventing unauthorized access.

Answer

MPUs encrypt data in memory to protect it from unauthorized access.

Question 11

What is the primary function of a cryptographic hash function in computer architecture security?

Accepted Answer

To verify the integrity of data

Answer

To encrypt data for secure storage

Answer

To generate random numbers

Answer

To provide access control to protected resources

Question 12

What is the purpose of secure boot in system security?

Accepted Answer

To ensure that only authorized code is loaded during system startup

Answer

To prevent unauthorized changes to system files

Answer

To detect and remove malware

Answer

To provide access control to protected resources

Question 13

The principle of least privilege states that:

Accepted Answer

Every user should have the minimum level of access necessary to perform their tasks.

Answer

Every user should have the same level of access to system resources.

Question 14

How do the security design principles of confidentiality, integrity, and availability guide the selection of appropriate security mechanisms?

Accepted Answer

Security design principles help determine the specific requirements that security mechanisms must meet.

Answer

Security design principles only apply when designing new security mechanisms, not when selecting existing ones.

Answer

Security mechanisms are selected solely based on performance and cost considerations.

Answer

Security mechanisms are chosen independently, without regard for their compatibility with other security measures.

Question 15

Which of the following is a **hardware-based** security mechanism used to protect computer systems?

Accepted Answer

Hardware security modules

Answer

Encryption

Answer

Access control lists

Answer

Intrusion detection systems

Question 16

What is the primary purpose of a firewall in a computer network?

Accepted Answer

To prevent unauthorized access to the network

Answer

To detect and block malicious network traffic

Answer

To encrypt data transmitted over the network

Answer

To provide authentication services for users

Question 17

What is the purpose of a secure boot process in a computer system?

Accepted Answer

To verify the integrity of the system software before loading

Answer

To encrypt data stored on the computer

Answer

To prevent unauthorized access to the hardware

Answer

To provide authentication services for users

Question 18

Which of the following is a principle of least privilege?

Accepted Answer

Users should only have the permissions they need to perform their tasks

Answer

All users should have the same level of permissions

Answer

Administrators should have access to all system resources

Answer

Security measures should be as restrictive as possible

Question 19

What is the role of a trusted platform module (TPM) in a computer system?

Accepted Answer

To generate and store cryptographic keys

Answer

To monitor and detect unauthorized access

Answer

To encrypt data stored on the computer

Answer

To provide authentication services for users

Question 20

What is the purpose of a security assessment in computer systems?

Accepted Answer

To identify and evaluate security risks

Answer

To implement security controls

Answer

To monitor and detect security breaches

Answer

To provide authentication services for users

Question 21

Identify the correct hardware-based security mechanism:

Accepted Answer

Processor isolation

Answer

Firewalls

Answer

Access control lists

Answer

Intrusion detection systems

Question 22

What is the primary purpose of a rootkit?

Accepted Answer

Modifying critical system files

Answer

Granting remote access to a system

Answer

Stealing sensitive information

Answer

Launching denial-of-service attacks

Question 23

Identify the main threat posed by buffer overflow attacks:

Accepted Answer

Unauthorized code execution

Answer

Data corruption

Answer

System crashes

Answer

Denial of service

Question 24

What is the main purpose of a digital certificate?

Accepted Answer

Establishing the identity of a website or email address

Answer

Encrypting and decrypting messages

Answer

Protecting against unauthorized access

Answer

Detecting and preventing malware

Question 25

How do the security principles of confidentiality, integrity, and availability impact hardware choices in computer architecture?

Accepted Answer

These principles guide the selection of hardware like memory protection units for access control and encryption engines for data protection.

Answer

These principles require physical separation of components to minimize electromagnetic interference.

Answer

These principles only apply to software and don't affect hardware architecture.

Answer

These principles only impact specialized security co-processors, not general-purpose components.

Question 26

Which of the following is not considered a hardware-based security mechanism in computer architecture?

Accepted Answer

Software encryption

Answer

Biometric authentication

Answer

Firewall

Answer

Trusted platform module (TPM)

Question 27

What is the primary purpose of a firewall in network security?

Accepted Answer

To monitor and control incoming and outgoing network traffic

Answer

To detect and respond to malware attacks

Answer

To encrypt data at rest

Answer

To authenticate users and control access to resources

Question 28

Which of the following is a key benefit of utilizing a Trusted Platform Module (TPM) in computer architecture?

Accepted Answer

Provides a secure storage for encryption keys and other sensitive data

Answer

Detects and prevents malicious code execution

Answer

Enforces access control policies and authorization rules

Answer

Facilitates remote management capabilities for system administrators

Question 29

What is the primary advantage of utilizing biometric authentication in computer security?

Accepted Answer

It is challenging to forge or duplicate biometric characteristics

Answer

It can be used remotely without requiring physical presence

Answer

It is cost-effective and requires minimal resources to implement

Answer

It is convenient and user-friendly for individuals to use

Question 30

Which of the following security mechanisms is categorized as software-based, rather than hardware-based?

Accepted Answer

Antivirus software

Answer

TPM

Answer

Firewall

Answer

Biometric authentication

Question 31

What is the primary objective of data encryption in computer security?

Accepted Answer

To protect data from unauthorized access or modification

Answer

To enhance data compression and reduce storage space

Answer

To improve data integrity and ensure consistency

Question 32

Which of the following is considered a type of encryption algorithm commonly used in computer security?

Accepted Answer

Symmetric-key encryption

Answer

Antivirus software

Answer

Firewall

Answer

Biometric authentication

Question 33

What is the primary purpose of conducting a security audit in computer architecture?

Accepted Answer

To identify and evaluate potential security vulnerabilities and risks

Answer

To implement and enforce security measures and controls

Answer

To train users on security best practices and awareness

Answer

To continuously monitor system activity for security breaches and incidents

Question 34

What is considered a best practice for creating strong and secure passwords?

Accepted Answer

Use a combination of uppercase and lowercase letters, numbers, and special characters

Answer

Keep passwords short and simple for easy memorization

Answer

Use common words or phrases as they are easier to remember

Question 35

Which of the following is a common software-based security mechanism used to protect against malware?

Accepted Answer

Antivirus

Answer

Access Control List (ACL)

Answer

Intrusion Detection System (IDS)

Answer

Firewall

Question 36

Which of the following is NOT a common hardware-based security mechanism?

Accepted Answer

Software encryption

Answer

Secure Boot

Answer

Firewalls

Answer

Trusted Platform Module (TPM)

Question 37

What is the primary purpose of software-based security mechanisms?

Accepted Answer

To protect against vulnerabilities in operating systems or software applications.

Answer

To detect and alert on malicious activity within a network.

Answer

To provide physical protection against unauthorized access.

Answer

To prevent unauthorized changes to hardware components.

Question 38

What is the main difference between a firewall and an intrusion detection system (IDS)?

Accepted Answer

Firewalls prevent malicious traffic from entering a network, while IDS detect and alert on malicious activity within a network.

Answer

IDS can prevent malicious activity, while firewalls can only detect it.

Answer

Firewalls are hardware-based, while IDS are software-based.

Answer

IDS can detect both internal and external threats, while firewalls can only protect against external threats.

Question 39

Which of the following is a key concept in access control?

Accepted Answer

Principle of least privilege

Answer

Network segmentation

Answer

Malware detection

Answer

Data encryption

Question 40

What is the purpose of a Trusted Platform Module (TPM)?

Accepted Answer

To store cryptographic keys and perform secure operations.

Answer

To encrypt network traffic.

Answer

To detect and prevent malware infections.

Answer

To control access to hardware devices.

Question 41

Which of the following is a common security threat to computer systems?

Accepted Answer

Data breaches

Answer

Natural disasters

Answer

Power outages

Answer

Hardware failures

Question 42

What is the main goal of security hardening?

Accepted Answer

To reduce the attack surface and mitigate security risks.

Answer

To increase the number of security mechanisms.

Answer

To detect and respond to security incidents.

Answer

To improve system performance.

Question 43

Which software-based security mechanism enforces user permissions to restrict access to sensitive data and resources?

Accepted Answer

Access control

Answer

Intrusion detection systems

Answer

Firewalls

Answer

Data encryption

Question 44

What type of cyberattack aims to disrupt the 'CIA triad' (confidentiality, integrity, and availability) of a system or data?

Accepted Answer

Denial-of-Service (DoS) attack

Answer

Phishing email

Answer

Spam campaign

Answer

Buffer overflow attack

Question 45

Which of the following is an effective countermeasure against brute force attacks on user accounts?

Accepted Answer

Account lockout after a specified number of failed login attempts

Answer

Using single-factor authentication

Answer

Installing firewalls and intrusion detection systems

Answer

Increasing password complexity requirements

Question 46

What is the primary purpose of a security audit in computer systems?

Accepted Answer

To assess the effectiveness of security measures, identify vulnerabilities, and recommend improvements

Answer

To monitor network traffic and detect security incidents

Answer

To provide training on security best practices to employees

Answer

To install and configure security software and tools

Question 47

Which cryptographic technique is used to convert data into a form that is difficult to decipher without knowledge of a secret key?

Accepted Answer

Encryption

Answer

Hashing

Answer

Steganography

Answer

Digital signature

Question 48

What is the main function of a firewall in computer networks?

Accepted Answer

To monitor and control incoming and outgoing network traffic based on defined security rules

Answer

To perform intrusion detection and incident response

Answer

To detect and neutralize viruses and malware

Answer

To provide secure remote access to corporate resources

Question 49

What is the primary objective of security testing in computer systems?

Accepted Answer

To identify and exploit vulnerabilities, assess the effectiveness of security measures, and make recommendations for improvement

Answer

To monitor network traffic and detect suspicious activities

Answer

To train security personnel on incident response and recovery

Answer

To design and implement security policies and procedures

Question 50

Which of the following is **not** a primary goal of security in computer architecture?

Accepted Answer

Maximizing system performance

Answer

Maintaining system availability

Answer

Ensuring data integrity

Answer

Protecting data confidentiality

Question 51

A memory protection mechanism that prevents a process from accessing memory outside its allocated space is called:

Accepted Answer

Memory segmentation

Answer

Virtual memory

Answer

Cache memory

Answer

Direct memory access (DMA)

Question 52

Which type of attack exploits software vulnerabilities by injecting malicious code disguised as legitimate data?

Accepted Answer

Code injection

Answer

Man-in-the-middle

Answer

Denial-of-service

Answer

Cross-site scripting (XSS)

Question 53

A security measure that encrypts data both while at rest and in transit, often used to protect sensitive information like passwords and financial data, is known as:

Accepted Answer

Data encryption

Answer

Access control

Answer

Firewall

Answer

Data integrity checking

Question 54

Which of the following is a hardware-based security feature that protects against unauthorized access by physically preventing the manipulation of memory contents?

Accepted Answer

Trusted Platform Module (TPM)

Answer

Firewall

Answer

Digital signature

Answer

Intrusion Detection System (IDS)

Question 55

A security measure that authenticates users and controls access to resources based on their permissions is known as:

Accepted Answer

Access control

Answer

Antivirus software

Answer

Intrusion Detection System (IDS)

Answer

Data encryption

Question 56

The process of verifying the authenticity and integrity of digital data using cryptographic techniques is known as:

Accepted Answer

Digital signature

Answer

Firewall

Answer

Intrusion Detection System (IDS)

Answer

Data encryption

Question 57

A security measure that detects and prevents unauthorized access attempts or malicious activities by analyzing network traffic is called:

Accepted Answer

Intrusion Detection System (IDS)

Answer

Data encryption

Answer

Firewall

Answer

Antivirus software

Question 58

A security principle ensuring that only authorized individuals have access to sensitive information is known as:

Accepted Answer

Confidentiality

Answer

Availability

Answer

Integrity

Question 59

Which of the following security measures aims to prevent unauthorized physical access to computing resources like servers and data centers?

Accepted Answer

Physical security

Answer

Data encryption

Answer

Intrusion Detection System (IDS)

Answer

Firewall