在网络安全防御中，密码类扫描技术的目的是检测系统和网络存在的弱口令，然后建立起针对该类扫描的防御机制。以下说法不正确的是（23）。
- A.检测系统和网络存在的弱口令用于发现缺省帐号和弱密码
- B.密码类扫描技术是为了发现密码类的脆弱性，并提供安全建议和安全补救措施。
- C.建立起针对该类扫描的防御机制目的是判断系统安全设施是否能检测到扫描
- D.密码类扫描技术检测不检测通用帐号，如root、sa等。
正确答案及解析
正确答案
解析
在网络安全防御中，密码类扫描技术的目的是检测系统和网络存在的弱口令，然后建立起针对该类扫描的防御机制。前者是发现缺省帐号和弱密码，如Administor、guest、root、sa等。后者是指在扫描时，系统的安全设施是否能检测到，以及在报警和日志等机制中能否发现这种扫描。其最终目标是发现密码类的脆弱性，并提供安全建议和安全补救措施。
包含此试题的试卷
你可能感兴趣的试题
Data security is the practice of protecting digital information from （ ）access，corruption,or theft throughout its entire lifecycle. It is a concept that encompasses every aspect of information security from the （ ）security of hardware and storage devices to administrative and access controls,as well as the logical security of software applications. It also includes organizational （ ）and procedures.Data security involves deploying tools and technologies that enhance the organization's visibility into where its critical data resides and how it is used. These tools and technologies should （ ）the growing challenges inherent in securing today's complex distributed,hybrid,and/or multicloud computing environments.Ideally,these tools should be able to apply protections like （作答此空）,data masking,and redaction of sensitive files, and should automate reporting to streamline audits and adhering to regulatory requirements.
-
- A.compression
- B.encryption
- C.decryption
- D.translation
- 查看答案
Data security is the practice of protecting digital information from （ ）access，corruption,or theft throughout its entire lifecycle. It is a concept that encompasses every aspect of information security from the （ ）security of hardware and storage devices to administrative and access controls,as well as the logical security of software applications. It also includes organizational （ ）and procedures.Data security involves deploying tools and technologies that enhance the organization's visibility into where its critical data resides and how it is used. These tools and technologies should （作答此空）the growing challenges inherent in securing today's complex distributed,hybrid,and/or multicloud computing environments.Ideally,these tools should be able to apply protections like （ ）,data masking,and redaction of sensitive files, and should automate reporting to streamline audits and adhering to regulatory requirements.
-
- A.address
- B.define
- C.ignore
- D.pose
- 查看答案
Data security is the practice of protecting digital information from （ ）access，corruption,or theft throughout its entire lifecycle. It is a concept that encompasses every aspect of information security from the （ ）security of hardware and storage devices to administrative and access controls,as well as the logical security of software applications. It also includes organizational （作答此空）and procedures.Data security involves deploying tools and technologies that enhance the organization's visibility into where its critical data resides and how it is used. These tools and technologies should （ ）the growing challenges inherent in securing today's complex distributed,hybrid,and/or multicloud computing environments.Ideally,these tools should be able to apply protections like （ ）,data masking,and redaction of sensitive files, and should automate reporting to streamline audits and adhering to regulatory requirements.
-
- A.behaviors
- B.cultures
- C.policies
- D.structures
- 查看答案
Data security is the practice of protecting digital information from （ ）access，corruption,or theft throughout its entire lifecycle. It is a concept that encompasses every aspect of information security from the （作答此空）security of hardware and storage devices to administrative and access controls,as well as the logical security of software applications. It also includes organizational （ ）and procedures.Data security involves deploying tools and technologies that enhance the organization's visibility into where its critical data resides and how it is used. These tools and technologies should （ ）the growing challenges inherent in securing today's complex distributed,hybrid,and/or multicloud computing environments.Ideally,these tools should be able to apply protections like （ ）,data masking,and redaction of sensitive files, and should automate reporting to streamline audits and adhering to regulatory requirements.
-
- A.logical
- B.physical
- C.network
- D.Information
- 查看答案
Data security is the practice of protecting digital information from （作答此空）access，corruption,or theft throughout its entire lifecycle. It is a concept that encompasses every aspect of information security from the （ ）security of hardware and storage devices to administrative and access controls,as well as the logical security of software applications. It also includes organizational （ ）and procedures.Data security involves deploying tools and technologies that enhance the organization's visibility into where its critical data resides and how it is used. These tools and technologies should （ ）the growing challenges inherent in securing today's complex distributed,hybrid,and/or multicloud computing environments.Ideally,these tools should be able to apply protections like （ ）,data masking,and redaction of sensitive files, and should automate reporting to streamline audits and adhering to regulatory requirements.
-
- A.unauthorizeD
- B.authorizeD
- C.normal
- D.frequent
- 查看答案