cisco chapter 5 cybersecurity Essential answer (BOLD font is answer )

Skip to main content

     

Question text

Identify three situations in which the hashing function can be applied. (Choose three.)

Select one or more:

IPsec

PPoE

PKI

DES

CHAP

WPA

Feedback

Refer to curriculum topic: 5.1.1
Three situations where a hash function could be used are as follows:

• When IPsec is being used
• When routing authentication is enabled
• In challenge responses within protocols such as PPP CHAP
• Within digitally signed contracts and PKI certificates

The correct answers are: IPsec, CHAP, PKI

Question 2

Incorrect

Mark 0.00 out of 2.00

Flag question

Question text

What are three type of attacks that are preventable through the use of salting? (Choose three.)

Select one or more:

reverse lookup tables

shoulder surfing

guessing

social engineering

rainbow tables

phishing

lookup tables

Feedback

Refer to curriculum topic: 5.1.2
Salting makes precomputed tables ineffective because of the random string that is used.

The correct answers are: lookup tables, reverse lookup tables, rainbow tables

Question 3

Correct

Mark 2.00 out of 2.00

Flag question

Question text

Alice and Bob use the same password to login into the company network. This means both would have the exact same hash for their passwords. What could be implemented to prevent both password hashes from being the same?

Select one:

pseudo-random generator

RSA

peppering

salting

Feedback

Refer to curriculum topic: 5.1.2
A password is stored as a combination of both a hash and a salt.

The correct answer is: salting

Question 4

Correct

Mark 2.00 out of 2.00

Flag question

Question text

What is the step by step process for creating a digital signature?

Select one:

Create a message; encrypt the message with a MD5 hash; and send the bundle with a public key.

Create a SHA-1 hash; encrypt the hash with the private key of the sender; and bundle the message, encrypted hash, and public key together to signed document.

Create a message digest; encrypt the digest with the public key of the sender; and bundle the message, encrypted digest, and public key together to sign the document.

Create a message digest; encrypt the digest with the private key of the sender; and bundle the message, encrypted digest, and public key together in order to sign the document.

Feedback

Refer to curriculum topic: 5.2.2
In order to create a digital signature, the following steps must be taken:

1. The message and message digest are created.
2. The digest and private key are encrypted.
3. The message, encrypted message digest, and public key are bundled to create the signed document.

The correct answer is: Create a message digest; encrypt the digest with the private key of the sender; and bundle the message, encrypted digest, and public key together in order to sign the document.

Question 5

Correct

Mark 2.00 out of 2.00

Flag question

Question text

Which method tries all possible passwords until a match is found?

Select one:

dictionary

cloud

rainbow tables

cryptographic

brute force

birthday

Feedback

Refer to curriculum topic: 5.1.1
Two common methods of cracking hashes are dictionary and brute force. Given time, the brute force method will always crack a password.

The correct answer is: brute force

Question 6

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user is connecting to an e-commerce server to buy some widgets for a company. The user connects to the site and notices there is no lock in the browser security status bar. The site does prompt for a username and password and the user is able to log in. What is the danger in proceeding with this transaction?

Select one:

The site is not using a digital certificate to secure the transaction, with the result that everything is in the clear.

The user is using the wrong browser to perform the transaction.

Ad blocker software is preventing the security bar from working properly, and thus there is no danger with the transaction.

The certificate from the site has expired, but is still secure.

Feedback

Refer to curriculum topic: 5.3.1
The lock in the browser window ensures a secure connection is being established and is not blocked by browser add-ons.

The correct answer is: The site is not using a digital certificate to secure the transaction, with the result that everything is in the clear.

Question 7

Correct

Mark 2.00 out of 2.00

Flag question

Question text

What are three validation criteria used for a validation rule? (Choose three.)

Select one or more:

format

encryption

key

size

type

range

Feedback

Refer to curriculum topic: 5.4.2
Criteria used in a validation rule include format, consistency, range, and check digit.

The correct answers are: size, range, format

Question 8

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user is instructed by a boss to find a better method to secure passwords in transit. The user has researched several means to do so and has settled on using HMAC. What are the key elements needed to implement HMAC?

Select one:

symmetric key and asymmetric key

IPsec and checksum

message digest and asymmetric key

secret key and message digest

Feedback

Refer to curriculum topic: 5.1.3
HMAC implementation is a secret key added to a hash.

The correct answer is: secret key and message digest

Question 9

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user has created a new program and wants to distribute it to everyone in the company. The user wants to ensure that when the program is downloaded that the program is not changed while in transit. What can the user do to ensure that the program is not changed when downloaded?

Select one:

Encrypt the program and require a password after it is downloaded.

Turn off antivirus on all the computers.

Create a hash of the program file that can be used to verify the integrity of the file after it is downloaded.

Distribute the program on a thumb drive.

Install the program on individual computers.

Feedback

Refer to curriculum topic: 5.1.1
Hashing is a method to ensure integrity and ensures that the data is not changed.

The correct answer is: Create a hash of the program file that can be used to verify the integrity of the file after it is downloaded.

Question 10

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user is the database administrator for a company. The user has been asked to implement an integrity rule that states every table ​must have a primary key and that the column or columns chosen to be the primary key must be unique and not null. Which integrity requirement is the user implementing?

Select one:

referential integrity

entity integrity

domain integrity

anomaly integrity

Feedback

Refer to curriculum topic: 5.4.1
There are three major database integrity requirements: entity, referential, and domain integrity.

The correct answer is: entity integrity

Question 11

Correct

Mark 2.00 out of 2.00

Flag question

Question text

An investigator finds a USB drive at a crime scene and wants to present it as evidence in court. The investigator takes the USB drive and creates a forensic image of it and takes a hash of both the original USB device and the image that was created. What is the investigator attempting to prove about the USB drive when the evidence is submitted in court?

Select one:

The data in the image is an exact copy and nothing has been altered by the process.

An exact copy cannot be made of a device.

The investigator found a USB drive and was able to make a copy of it.

The data is all there.

Feedback

Refer to curriculum topic: 5.1.1
A hash function ensures the integrity of a program, file, or device.

The correct answer is: The data in the image is an exact copy and nothing has been altered by the process.

Question 12

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user has been asked to implement IPsec for inbound external connections. The user plans to use SHA-1 as part of the implementation. The user wants to ensure the integrity and authenticity of the connection. What security tool can the user use?

Select one:

SHA256

MD5

ISAKMP

HMAC

Feedback

Refer to curriculum topic: 5.1.3
HMAC provides the additional feature of a secret key to ensure integrity and authentication.​

The correct answer is: HMAC

Question 13

Incorrect

Mark 0.00 out of 2.00

Flag question

Question text

What is the standard for a public key infrastructure to manage digital certificates?

Select one:

x.503

NIST-SP800

x.509

PKI

Feedback

Refer to curriculum topic: 5.3.2
The x.509 standard is for a PKI infrastructure and x.500 if for directory structures.​

The correct answer is: x.509

Question 14

Correct

Mark 2.00 out of 2.00

Flag question

Question text

What is the purpose of CSPRNG?

Select one:

to generate salt

to process hash lookups

to prevent a computer from being a zombie

to secure a web site

Feedback

Refer to curriculum topic: 5.1.2
Salting prevents someone from using a dictionary attack to guess a password. Cryptographically Secure Pseudo-Random Number Generator (CSPRNG) is one way (and the best way) to generate salt.

The correct answer is: to generate salt

Question 15

Correct

Mark 2.00 out of 2.00

Flag question

Question text

What is a strength of using a hashing function?

Select one:

It is not commonly used in security.

It can take only a fixed length message.

It has a variable length output.

It is a one-way function and not reversible.

Two different files can be created that have the same output.

Feedback

Refer to curriculum topic: 5.1.1
Understanding the properties of a hash function shows its applicability such as one-way function, arbitrary input length, and fixed output.

The correct answer is: It is a one-way function and not reversible.

Question 16

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A recent breach at a company was traced to the ability of a hacker to access the corporate database through the company website by using malformed data in the login form. What is the problem with the company website?

Select one:

weak encryption

lack of operating system patching

poor input validation

bad usernames

Feedback

Refer to curriculum topic: 5.4.2
The ability to pass malformed data through a website is a form of poor input validation.

The correct answer is: poor input validation

Question 17

Correct

Mark 2.00 out of 2.00

Flag question

Question text

What are three NIST-approved digital signature algorithms? (Choose three.)

Select one or more:

DSA

SHA256

MD5

SHA1

ECDSA

RSA

Feedback

Refer to curriculum topic: 5.2.2
NIST chooses approved algorithms based on public key techniques and ECC. The digital signature algorithms approved are DSA, RSA, and ECDSA.

The correct answers are: DSA, RSA, ECDSA

Question 18

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A recent email sent throughout the company stated that there would be a change in security policy. The security officer who was presumed to have sent the message stated the message was not sent from the security office and the company may be a victim of a spoofed email. What could have been added to the message to ensure the message actually came from the person?

Select one:

digital signature

non-repudiation

asymmetric key

hashing

Feedback

Refer to curriculum topic: 5.2.1
Digital signatures ensures non-repudiation or the ability not to deny that a specific person sent a message.

The correct answer is: digital signature

Question 19

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user downloads an updated driver for a video card from a website. A warning message pops up saying the driver is not approved. What does this piece of software lack?

Select one:

source code

code recognition

valid ID

digital signature

Feedback

Refer to curriculum topic: 5.2.2
Code signing is a method of verifying code integrity

The correct answer is: digital signature

Question 20

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user is evaluating the security infrastructure of a company and notices that some authentication systems are not using best practices when it comes to storing passwords. The user is able to crack passwords very fast and access sensitive data. The user wants to present a recommendation to the company on the proper implementation of salting to avoid password cracking techniques. What are three best practices in implementing salting? (Choose three.)

Select one or more:

A salt must be unique.

A salt should be unique for each password.

The same salt should be used for each password.

Salts should be short.

Salts are not an effective best practice.

A salt should not be reused.

Feedback

Refer to curriculum topic: 5.1.2
Salting needs to be unique and not reused. Doing the opposite will cause passwords to be cracked easily.

The correct answers are: A salt should be unique for each password., A salt should not be reused., A salt must be unique.

Google Placement Papers with Solutions 2020

 Google Placement Papers with Solutions 2020

Multinational companies like Google, Microsoft and Dell visit campuses across India every year to hire fresh talent. If you want to crack these interviews, prepare systematically in advance to avoid jitters on the placement day. In order to help you with your preparation, we have collated Google placement papers for the current batches. Detailed test pattern highlighted below will help you identify your areas of strengths & weaknesses, provide you with customized tips/strategies to enhance your performance and help you crack Google placement paper or any other company placement test.

We highly recommend that you go through all the company placement tests provided by Firstnaukri before appearing for your first job interview. If you are sitting for Google placement papers, start your preparation right here. In this article, you will get an idea of Google test patterns and most expected questions in the upcoming drives this year onwards.

Below is a detailed analysis of Google previous year placement papers to help you prepare confidently.

Google Placement Paper Sample

## Google placement papers analysis of test pattern

## Google placement papers – Mock test

## Google placement papers syllabus

## Google Quantitative Aptitude questions

## Google Logical Reasoning Questions

## Google Verbal Ability Questions

## How to prepare for Google drive 2020 onwards

 

Google placement papers analysis of test pattern

According to Google “There’s no one kind of Googler, so we’re always looking for people who can bring new perspectives and life experiences to our teams. If you’re looking for a place that values your curiosity, passion, and desire to learn, if you’re seeking colleagues who are big thinkers eager to take on fresh challenges as a team, then you’re a future Googler.”

Many freshers wonder all the time “Does Google ask brainteaser questions in job interviews?” The good news is it doesn’t! We came to know from the horse’s mouth that brainteaser questions did not allow Google interviewers to predict how well someone would do on the job, hence they scrapped the format! So focus on work sample tests instead and prepare for structured interview questions.

Google placement papers – Mock test

Practice multiple mock tests to crack the analytical round at Google. Here are some free online Google recruitment exam specific data sufficiency questions for you to practice. Solve these questions based on calculation and logic to boost your scores.

Q1. What is the code for ‘mangoes’ in the code language?

Statements: In that code language, ‘Te Le Pa Na’ means ‘You eat many mangoes’ and ‘Le Na Da’ means ‘You sell mangoes’. In the code language, ‘Ge Na Se La Le’ means ‘They eat bananas and mangoes’ and ‘Ne De Le La’ means ‘Who others eat bananas’.

A) I alone is sufficient while II alone is not sufficient
B) Either I or II is sufficient
C) Both I and II are sufficient
D) II alone is sufficient while I alone is not sufficient

Q2. Below given are four matrices:

P = 20×10
Q = 10×5
R = 5×10
S = 10×10
Find the minimum number of multiplication required for PxQxRxS?
A) 4000
B) 2500
C) 3000
D) None Of These

Q3. Two n-size arays are given to you. n1 in decreasing order and n2 in increasing order. If c1 is time complexity for n1 using quicksort and c2 is time complexity for n2 using quicksort. Then –

A) c1 > c2
B) c1 < c2
C) c1 = c2
D) None of these

Q4. Let w(n) and A(n) denote the worst case and average case running time of an algorithm executed on an input of size n. which of the following is ALWAYS TRUE?

a) A(n) = Omega(W(n))
b) A(n) = Theta(W(n))
c) A(n) = O(W(n))
d) A(n) = o(W(n)

Q5) How many insertion sequences of key values using same hash function of question 10 and linear probing will result in the hash table shown below?

|0|   | 
|1|   |
|2| 42|
|3| 23|
|4| 34|
|5| 52|
|6| 46|
|7| 33|
|8|   |
|9|   |

a) 10
b) 20
c) 30
d) 40

Q6) If there is a N sorted array then what is time complexity of finding 2 numbers with sum less than 1000.

A) O(1)
B) O(n^2)
C) O(n)
D) O(logn)

Google placement papers syllabus

Below we have given the complete Google placement paper test pattern, with number of questions per section, detailed syllabus, and selection process. Please note that the Google test pattern and Google placement syllabus are two completely different yet important things. As a Google aspirant, please attend your interview in this company after preparing thoroughly.

Section	Number of Questions	Time Limit
Quantitative Ability	10	–
Reasoning	10	–
English	05	–
Technical	15	–
Total	40	40 Min

A) Quantitative: — Topics covered will include probability, permutations & combinations, algebra, time speed & distance, averages, time & work, profit & loss, ratio & proportion, simple & compound interest, percentages, mixtures & allegations, simplification, number series, number system, heights and distances, geometry, mensuration, data sufficiency, logarithms, and progressions.

B) Reasoning: — This section will cover puzzles, syllogisms, binary logic, clocks & calendars, cubes and dice, series, coding-decoding, non-verbal reasoning, analogies, classification, blood relations, directions and distances, ordering and ranking, data sufficiency, seating arrangement, venn diagrams, arrangements, patterns, coded inequalities, double lineup, logical deductions, routes and networks, scheduling, grouping and selection etc.

C) English: — Will comprise of reading comprehension, synonyms & antonyms, fill in the blanks, analogy, theme detection, direct & indirect speech, active & passive voice, para jumbles, sentence jumbles, error spotting, phrase replacement, one word substitution, spellings.

D) Technical: — Your skills in pseudo code for analytical ability, C for coding knolwedge, UNIX for server side administration and SQL for database, will be tested.

Google Quantitative Aptitude questions

Please make a note that after clearing the aptitude written test online, you will head for the Technical interview and then the HR interview. So it is critical that you perform well in quantitative aptitude round of your Google placement papers. Here are some questions to help you practice well.

Q1) A water tank is hemispherical at the bottom and cylindrical at the top. If its radius is $12$ m and capacity is  cubic metres, height of the cylindrical portion will be ___ meters.

Q2) An aeroplane travelling at $700$ kmph in level flight drops a bomb from a height of $1000$metres on the target. Then time taken to release the bomb to hit its target is ___.

Q3) If three metallic spheres of radii $6$ cms, $8$ cms and $10$ cms respectively are melted from a single sphere, the diameter of the new sphere will be ___.

Q4) In a History exam, average score of the entire class was $80$. If 1 of students scored $95$ marks and  scored $\mathrm{90,\; w}$hat was the average score of the remaining students in the class? Ans:____?

Q5) 60 men can build a wall in 3 days, but they decide to begin the work together. $5$ men quit after the first 10 days. So time needed to build the wall is ____ days.

Google Logical Reasoning questions

Given below are some logical reasoning questions to help you crack Google placement papers.

Q1) 1 1 1 1 = R         2 2 2 2 = T              3 3 3 3 = E               4 4 4 4 = ?

If 1 1 1 1 =R , 2 2 2 2 = T , 3 3 3 3 =E , then what 4 4 4 4 equals to ?

Q2) You have twelve balls that are completely identical with the exception that ONE of them is EITHER lighter or heavier than the rest. The difference in weight is imperceptible other than with a balance scale. Given three weighing with an accurate balance scale, how can you determine which ball it is AND if it is lighter or heavier than the others?

Q3) Which weighs more: a tonne of silver or a tonne of gold?

How to prepare for Google drive 2019 onwards

In order to crack the coding part in Google placement papers, learn at least one programming language really well. Choose any one from C++, Java, Python, Go, or C. have clear understanding of APIs, Object Orientated Design and Programming concepts. You should know how to test and debug your code script too. If you are able to come up with corner cases and edge cases for code, you will crack the test!

Quick Tip: Conceptual understanding is appreciated at Google, not memorization.

Also, in order to prepare well for Google placement papers, make it a habit to read newspapers and magazines everyday. Stay updated about current affairs and latest world events. All the sections in Google placement papers hold equal importance. So prepare accordingly. Refer competitive exam books to practice aptitude and reasoning questions. Practice online mock tests to become familiar with the test pattern.

As discussed already, Google placement papers have 5 sections namely Logical Reasoning, General Aptitude, Technical Test, General English Test, and Analysis. Most freshers who have attempted Google placement papers in the past have confirmed that the written test consists of two parts.

## The objective part: It contains 20 multiple choice questions or MCQs
## Programming part: It asks you to solve a program or write pseudo code for the same. It could be a dynamic programming test as well. Out of all 20 questions, nearly 10 are objective and remaining are from OS, C language, aptitude.

So set a timer and solve mock tests with 5 sections. There are scores of practice tests available online for Google placement paper preparation. Solve them to know your areas of lacunae and work on them accordingly.

Student interview from recent Google Placement Drive

“In order to crack the technical interview round in my Google interview, I prepared well in advance. I ensured to brush up my basics and develop a strong understanding of my entire computer science syllabus. This is the key to get a software engineering job not only at Google but also elsewhere. I also went through Google’s Technical Development Guide for to develop specific technical skills. Coming to Google placements, they conduct two types of interviews namely telephonic/hangout interviews and onsite interviews. Google also conducts outreach events across hundreds of universities all over the world, including India. They came to my university too in order to spread the word about Google internships and fresher job opportunities for recent graduates. In case you want Google to come to your university too, you will have to check with your training and placement cell. If Google is unable to come to your campus, you can visit their career site for students and apply for exciting opportunities.”

Input & Output Question ID 1111110030: IO 21

Input & output 

Question ID 

1111110030: IO 21

Test case 1:

 Input (stdin)

12.01

Expected Output 

The integer variant of 12.01 is=12

Test case 2:

Input 

23.15

Output 

The integer variant of 23.15 is=23

Source code :

#include <stdio.h>

int main()

{

float a;

scanf("%f",&a);

printf("The integer variant of %0.2f is=%0.0f",a,a);

return 0;

}

Control and looping

Control and looping 

Question ID 

1114210080 : SQUARE STAR PATTERN

Logic Test case 1

Input (stdin)

2

expected Output 

**

**

Logic Test case 2

Input (stdin)

4

Expected Output 

****

****

****

****

code area :

#include <stdio.h>

int main()

{

  int row,num,l;

  scanf("%d",&num);

  for(row=1;row<=num;row++)

  {

    for(l=1;l<=num;l++)

    {

    printf("*");

    }

  printf("\n");

  }

 return 0;

}

Python program to convert a given float number to integer

 Python program to convert a given float number to integer 

CODE SOURCE :

num = float (input())

print(int(num))

TEST CASE 1:

SAMPLE INPUT :

15.893

EXEPT OUTPUT :

15

TEST CASE 2:

SAMLE INPUT :

19.567

EXEPT OUTPUT :

19