MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Which primary protocol does Network Time Security (NTS) provide security enhancements for in cloud environments?
a. SSH
b. NTP
c. FTP
d. HTTPS
Answer: b. NTPictbanking
What key cryptographic goal does NTS address for network time synchronization in cloud systems?
a. Confidentiality
b. Integrity
c. Availability
d. Authentication
Answer: d. Authenticationictbanking
Which port does the NTS Key Establishment (NTS-KE) protocol use for communication?
a. 443
b. 80
c. 4460
d. 25
Answer: c. 4460ictbanking
What protocol is responsible for securing the key exchange in NTS?
a. SSH
b. TLS
c. SNMP
d. IPSec
Answer: b. TLSictbanking
Which of these is a main component of NTS architecture for securing NTP traffic?
a. Security Groups
b. Cookies
c. Tokens
d. API Keys
Answer: b. Cookiesictbanking
What do NTS cookies contain?
a. Server public keys
b. Client credentials
c. Keys required to authenticate NTP packets
d. Usernames
Answer: c. Keys required to authenticate NTP packetsictbanking
In NTS, which aspect of security is NOT directly provided?
a. Protection against time manipulation
b. Data confidentiality
c. Server authentication
d. Packet integrity
Answer: b. Data confidentialityictbanking
What is the primary risk if NTP remains unsecured in the cloud?
a. Man-in-the-middle attacks
b. Data exfiltration
c. Denial of Service
d. Unauthorized resource allocation
Answer: a. Man-in-the-middle attacksictbanking
Which step is recommended before enabling NTS on a server?
a. Disable SSL
b. Setup standard (unauthenticated) NTP
c. Open all ports
d. Change server timezone
Answer: b. Setup standard (unauthenticated) NTPntpsec
What type of certificate is typically required for an NTS-enabled server?
a. Self-signed certificate
b. Well-formed SSL certificate
c. Root CA certificate
d. RSA certificate
Answer: b. Well-formed SSL certificatentpsec
Which is a major advantage of NTS over symmetric key NTP authentication?
a. Manual key distribution
b. Scalability to millions of clients
c. Use of weak algorithms
d. No authentication
Answer: b. Scalability to millions of clientsictbanking
Which software added support for NTS in version 4.0?
a. ntpd
b. Chrony
c. OpenNTPD
d. BIND
Answer: b. Chronyictbanking
What is the default behavior of NTS in most Linux distributions?
a. Enabled by default
b. Disabled by default
c. Running on port 8080
d. Requires no configuration
Answer: b. Disabled by defaultictbanking
What is the main benefit of NTS for privacy in cloud deployments?
a. Static device IDs
b. Avoidance of cookie reuse
c. Fixed time keys
d. Transparent logs
Answer: b. Avoidance of cookie reuseictbanking
Which type of key is established through the NTS-KE protocol?
a. Pre-shared key
b. Session key
c. Static key
d. Recovery key
Answer: b. Session keyictbanking
What is the minimum number of NTS servers recommended for high reliability in cloud environments?
a. One
b. Two
c. Three
d. Four
Answer: c. Threeictbanking
What should be minimized for best time accuracy when configuring NTP with NTS?
a. Server certificates
b. Network latency and asymmetry
c. Backup retention
d. Number of clients
Answer: b. Network latency and asymmetryictbanking
What is a common fallback when no close NTS server exists?
a. Only use public NTP
b. Mix distant NTS with closer non-NTS servers
c. Disable time sync
d. Use HTTP for time
Answer: b. Mix distant NTS with closer non-NTS serversictbanking
What is NOT a primary goal of NTS?
a. Packet integrity
b. Time confidentiality
c. Server authentication
d. Privacy
Answer: b. Time confidentialityictbanking
Where are NTS key cookies usually stored by default?
a. /var/tmp
b. /var/lib/ntp/nts-keys
c. /etc/ntp/
d. /usr/local/bin
Answer: b. /var/lib/ntp/nts-keysntpsec
In which RFC is NTS for NTP defined?
a. RFC 5246
b. RFC 2898
c. RFC 8915
d. RFC 5280
Answer: c. RFC 8915ictbanking
What is the role of “ntp.conf” in NTS deployments?
a. Stores user passwords
b. Configures NTS keys, certificates, and cookies
c. Serves web content
d. Manages cloud VMs
Answer: b. Configures NTS keys, certificates, and cookiesntpsec
Why can’t symmetric key NTP be scaled effectively in public clouds?
a. Weak algorithm
b. No key agility
c. Server needs one key per client
d. No encryption
Answer: c. Server needs one key per clientictbanking
NTS relies on which cryptographic principle to provide packet integrity?
a. Hash functions
b. Public-key infrastructure
c. Keyed MACs
d. Passwords
Answer: c. Keyed MACsictbanking
In cloud-based NTS, what is the main consequence of attacker’s ability to drop/delay packets?
a. Arbitrary time injection
b. Certificate compromise
c. Only cause time to lag or appear less accurate
d. Full system compromise
Answer: c. Only cause time to lag or appear less accurateictbanking
What does “NTS-enabled server” mean in cloud terms?
a. Uses DNSSEC for security
b. Runs NTP secured with NTS protocol
c. Accepts plaintext NTP
d. Requires FTP authentication
Answer: b. Runs NTP secured with NTS protocolictbanking
Who are two major public NTS server providers as of now?
a. Amazon and Google
b. Microsoft and Oracle
c. Cloudflare and Netnod
d. Akamai and IBM
Answer: c. Cloudflare and Netnodictbanking
What is the primary attack mitigated by deploying NTS with NTP?
a. Replay attack
b. Packet sniffing
c. Packet tampering and spoofing
d. DNS poisoning
Answer: c. Packet tampering and spoofingictbanking
How does NTS ensure cookies are not reused?
a. Session expiration
b. Client receives new cookie on every server response
c. Manual key rotation
d. Random time intervals
Answer: b. Client receives new cookie on every server responseictbanking
If bad actors cannot access the cookie key file, what does this prevent?
a. Data loss
b. Unauthorized packet signing
c. Backup failure
d. Certificate expiration
Answer: b. Unauthorized packet signingntpsec
What would happen if a cloud NTP client uses an unauthenticated NTP server?
a. Guaranteed time accuracy
b. No risk
c. Susceptible to man-in-the-middle and spoofing
d. Configuration error
Answer: c. Susceptible to man-in-the-middle and spoofingictbanking
Which distribution uses NTPsec as the default NTP client with NTS support?
a. Debian
b. Fedora 33
c. Ubuntu 16.04
d. Red Hat 5
Answer: b. Fedora 33ictbanking
How are NTS cookies created during the NTS-KE exchange?
a. Manually entered
b. Random functions only
c. Server generates and encrypts with TLS
d. Reused from previous session
Answer: c. Server generates and encrypts with TLSictbanking
Which property is protected by NTS to prevent client tracking in the cloud?
a. Usernames
b. IP addresses
c. Session reuse by observers
d. Firewall rules
Answer: c. Session reuse by observersictbanking
To use NTS in the cloud, why is it advisable to select servers geographically close to client instances?
a. Certificate renewal
b. Network latency and route asymmetry reduction
c. Data retention
d. Licensing issues
Answer: b. Network latency and route asymmetry reductionictbanking
Which cloud protocol is commonly secured with NTS?
a. HTTPS
b. SMTP
c. NTP
d. SFTP
Answer: c. NTPictbanking
On which layer does the NTS-KE protocol operate?
a. Data Link
b. Transport
c. Application
d. Network
Answer: c. Applicationictbanking
Which of the following statements about NTS cookies is TRUE?
a. Cookies never expire
b. Reusing cookies can enable tracking
c. Cookies contain cleartext passwords
d. Cookies are optional
Answer: b. Reusing cookies can enable trackingictbanking
What must ntpd be able to do regarding SSL certificate and key files for NTS?
a. Delete them after use
b. Read but restrict access to others
c. Backup automatically
d. Move them to user directory
Answer: b. Read but restrict access to othersntpsec
For NTS, what is the practical impact if an attacker can only delay packets, not tamper with time?
a. Full compromise
b. Increased clock accuracy
c. Clock slippage or reduced accuracy
d. Stealth synchronization
Answer: c. Clock slippage or reduced accuracyictbanking
Why should only trusted NTS servers be used in cloud production environments?
a. To speed up performance
b. To avoid clock spoofing and maintain trustworthy time
c. To enable passwordless login
d. To improve cost efficiency
Answer: b. To avoid clock spoofing and maintain trustworthy timeictbanking
Which software, besides Chrony, supports NTS for secure network time?
a. NTPsec
b. OpenSSL
c. Postfix
d. Bind
Answer: a. NTPsecntpsec
Which of the following is NOT a step in setting up NTS on a server?
a. Getting a valid SSL certificate
b. Configuring ntp.conf with NTS lines
c. Uploading cookies to clients
d. Ensuring permissions on key/cookie files
Answer: c. Uploading cookies to clientsntpsec
What does the NTS-KE protocol provide that traditional NTP key exchange does not?
a. Key reuse
b. Manual distribution
c. Automated, secure key exchange
d. Unencrypted traffic
Answer: c. Automated, secure key exchangeictbanking
Which main cryptographic protocol underpins NTS-KE’s security model?
a. SSH
b. TLS
c. S/MIME
d. IPSec
Answer: b. TLSictbanking
If a cloud client needs to synchronize time securely and at scale, which network protocol should be recommended?
a. DNSSEC
b. SNMPv1
c. NTP with NTS
d. Telnet
Answer: c. NTP with NTSictbanking
What is a requirement for a server FQDN in NTS configuration?
a. No certificate needed
b. Must match SSL cert’s CN
c. Static private IP
d. Client must be root
Answer: b. Must match SSL cert’s CNntpsec
In NTS for NTP, the client obtains new cookies with each server response to support what security property?
a. Confidentiality
b. Availability
c. Forward secrecy
d. Auditability
Answer: c. Forward secrecyictbanking
What is a consequence of NTS client implementation not securing its cookie file?
a. Nothing important
b. Loss of time accuracy
c. Attackers may generate valid signatures, compromising authenticity
d. Increased network latency
Answer: c. Attackers may generate valid signatures, compromising authenticityntpsec
Why is NTS adoption growing in cloud infrastructure operations?
a. Simpler configuration
b. Enhanced security and scalability needs for reliable time sync
c. Lower costs
d. No certificate requirements
Answer: b. Enhanced security and scalability needs for reliable time syncntpsec+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info