Network Security Multiple Choice Questions & Answers on “Transport Layer Security and HTTPS”.
1. In the SSLv3 the padding bits are ____________ with the secret key.
a) Padded
b) XORed
c) Concatenated
d) ANDed
Answer: c
Clarification: The padding bits are concatenated with the secret key.
2. Which of the following is not a valid input to the PRF in SSLv3?
a) secret value
b) identifying label
c) initialization vector
d) secret value
Answer: c
Clarification: The PRF does not require an initialization vector.
3. Which of the following alert codes is not supported by SSLv3?
a) record_overflow
b) no_certificate
c) internal_error
d) decode_error
Answer: b
Clarification: no_certificate is not supported by the SSLv3.
4. We encounter the record_overflow error when the payload length exceeds –
a) 214 + 1024
b) 216 + 1024
c) 214 + 2048
d) 216 + 2048
Answer: c
Clarification: The overflow error is encountered when the length exceeds 214 + 2048.
5. Which key exchange technique is not supported by SSLv3?
a) Anonymous Diffie-Hellman
b) Fixed Diffie-Hellman
c) RSA
d) Fortezza
Answer: d
Clarification: Fortezza is not supported in SSLv3.
6. Calculation of the certificate_verify in TLS involves the use of a finished_label. The finished_label is the string-
a) client finished for the client
b) client finished for the client, server finished for the server
c) server finished for the server
d) client finished for the server, server finished for the client
Answer: b
Clarification: The finished_label is the string client finished for the client, server finished for the server.
7. In TLS padding cann be upto a maximum of –
a) 79 bytes
b) 127 bytes
c) 255 bytes
d) none of the mentioned
Answer: c
Clarification: Padding can be upto a maximum of 255 bytes.
8. URL stands for –
a) Universal Remote Locator
b) Universal Resource Language
c) Uniform Resource Locator
d) Uniform Resource Language
Answer: c
Clarification: URL stands for Uniform Resource Locator.
9. HTTPS stands for Hypertext Transfer Protocol over TLS.
a) True
b) False
Answer: a
Clarification: The statement is true. HTTPS is HTTP invoked over SSL/TLS.
10. An HTTP connection uses port _________ whereas HTTPS uses port ____________ and invokes SSL.
a) 40; 80
b) 60; 620
c) 80; 443
d) 620; 80
Answer: c
Clarification: HTTP uses 80 ports, whereas HTTPS uses 443 ports.