icoa-cli 2.10.0 → 2.12.1

package/translations/zh/demo.json

@@ -0,0 +1,332 @@
+[
+  {
+    "number": 1,
+    "text": "哪种算法不是对称密码？",
+    "category": "Cryptography",
+    "options": {
+      "A": "AES",
+      "B": "RSA",
+      "C": "DES",
+      "D": "Blowfish"
+    }
+  },
+  {
+    "number": 2,
+    "text": "SQL注入利用了什么？",
+    "category": "Web Security",
+    "options": {
+      "A": "Web服务器中的缓冲区溢出",
+      "B": "数据库查询中未经过滤的用户输入",
+      "C": "弱加密算法",
+      "D": "配置错误的防火墙规则"
+    }
+  },
+  {
+    "number": 3,
+    "text": "哪个 HTTP 状态码表示“Forbidden”（禁止访问）？",
+    "category": "Web Security",
+    "options": {
+      "A": "401",
+      "B": "404",
+      "C": "403",
+      "D": "500"
+    }
+  },
+  {
+    "number": 4,
+    "text": "在密码学中，nonce 的主要目的是什么？",
+    "category": "Cryptography",
+    "options": {
+      "A": "加密静态数据",
+      "B": "防止重放攻击",
+      "C": "生成随机密码",
+      "D": "在加密前压缩数据"
+    }
+  },
+  {
+    "number": 5,
+    "text": "以下哪种工具通常用于网络数据包捕获？",
+    "category": "Network",
+    "options": {
+      "A": "Burp Suite",
+      "B": "Ghidra",
+      "C": "Wireshark",
+      "D": "John the Ripper"
+    }
+  },
+  {
+    "number": 6,
+    "text": "在网络安全中，XSS 代表什么？",
+    "category": "Web Security",
+    "options": {
+      "A": "扩展安全系统",
+      "B": "跨站脚本",
+      "C": "XML 安全套接字",
+      "D": "跨服务器共享"
+    }
+  },
+  {
+    "number": 7,
+    "text": "防火墙的主要功能是什么？",
+    "category": "Network",
+    "options": {
+      "A": "加密网络数据",
+      "B": "根据安全规则过滤网络流量",
+      "C": "检测文件中的病毒",
+      "D": "加速互联网连接"
+    }
+  },
+  {
+    "number": 8,
+    "text": "哪种类型的恶意软件会将自己伪装成合法软件？",
+    "category": "Malware",
+    "options": {
+      "A": "蠕虫",
+      "B": "勒索软件",
+      "C": "木马",
+      "D": "广告软件"
+    }
+  },
+  {
+    "number": 9,
+    "text": "哪个协议在Web上提供安全通信？",
+    "category": "Network",
+    "options": {
+      "A": "HTTP",
+      "B": "FTP",
+      "C": "HTTPS",
+      "D": "SMTP"
+    }
+  },
+  {
+    "number": 10,
+    "text": "什么是密码学哈希？",
+    "category": "Cryptography",
+    "options": {
+      "A": "一种可逆的加密密钥",
+      "B": "一种生成固定大小摘要的单向函数",
+      "C": "一种身份验证协议",
+      "D": "一种数字签名"
+    }
+  },
+  {
+    "number": 11,
+    "text": "哪个工具用于二进制分析？",
+    "category": "Reverse Engineering",
+    "options": {
+      "A": "Nmap",
+      "B": "SQLMap",
+      "C": "Ghidra",
+      "D": "Nikto"
+    }
+  },
+  {
+    "number": 12,
+    "text": "哪种攻击通过操纵 DNS 请求来重定向流量？",
+    "category": "Network",
+    "options": {
+      "A": "网络钓鱼",
+      "B": "DNS 欺骗",
+      "C": "SQL 注入",
+      "D": "暴力破解"
+    }
+  },
+  {
+    "number": 13,
+    "text": "SSH 的标准端口是多少？",
+    "category": "Network",
+    "options": {
+      "A": "21",
+      "B": "22",
+      "C": "80",
+      "D": "443"
+    }
+  },
+  {
+    "number": 14,
+    "text": "什么是双因素认证（2FA）？",
+    "category": "Authentication",
+    "options": {
+      "A": "使用两个不同的密码",
+      "B": "使用两种不同类型的凭证来验证身份",
+      "C": "将数据加密两次",
+      "D": "通过两个网络进行连接"
+    }
+  },
+  {
+    "number": 15,
+    "text": "哪个 Linux 命令可以显示系统上的开放端口？",
+    "category": "Linux",
+    "options": {
+      "A": "ls -la",
+      "B": "netstat -tulpn",
+      "C": "chmod 777",
+      "D": "cat /etc/passwd"
+    }
+  },
+  {
+    "number": 16,
+    "text": "什么是中间人 (MitM) 攻击？",
+    "category": "Network",
+    "options": {
+      "A": "未经授权访问服务器",
+      "B": "拦截并篡改双方之间的通信",
+      "C": "发送多个请求使服务器过载",
+      "D": "通过暴力破解猜测密码"
+    }
+  },
+  {
+    "number": 17,
+    "text": "以下哪一项是哈希算法？",
+    "category": "Cryptography",
+    "options": {
+      "A": "AES-256",
+      "B": "SHA-256",
+      "C": "RSA-2048",
+      "D": "Diffie-Hellman"
+    }
+  },
+  {
+    "number": 18,
+    "text": "什么是最小特权原则？",
+    "category": "Security",
+    "options": {
+      "A": "给予所有用户 root 访问权限",
+      "B": "仅授予执行任务所需的必要权限",
+      "C": "使用尽可能短的密码",
+      "D": "禁用所有防火墙"
+    }
+  },
+  {
+    "number": 19,
+    "text": "哪种工具通常用于端口扫描？",
+    "category": "Network",
+    "options": {
+      "A": "Wireshark",
+      "B": "Metasploit",
+      "C": "Nmap",
+      "D": "Hashcat"
+    }
+  },
+  {
+    "number": 20,
+    "text": "什么是勒索软件？",
+    "category": "Malware",
+    "options": {
+      "A": "显示不受欢迎广告的软件",
+      "B": "加密文件并要求付款以解密的软件",
+      "C": "记录键盘敲击的软件",
+      "D": "在网络中自我复制的软件"
+    }
+  },
+  {
+    "number": 21,
+    "text": "对称加密和非对称加密之间有什么区别？",
+    "category": "Cryptography",
+    "options": {
+      "A": "对称加密使用相同的密钥进行加密和解密；非对称加密使用两个不同的密钥",
+      "B": "对称加密比非对称加密慢",
+      "C": "非对称加密仅适用于小文件",
+      "D": "没有显著区别"
+    }
+  },
+  {
+    "number": 22,
+    "text": "哪种漏洞允许在Web服务器上执行任意代码？",
+    "category": "Web Security",
+    "options": {
+      "A": "CSRF",
+      "B": "远程代码执行 (RCE)",
+      "C": "点击劫持",
+      "D": "开放重定向"
+    }
+  },
+  {
+    "number": 23,
+    "text": "OWASP 是什么？",
+    "category": "Security",
+    "options": {
+      "A": "一种安全操作系统",
+      "B": "一个发布 Web 安全标准和指南的组织",
+      "C": "一种防火墙",
+      "D": "一种用于安全的编程语言"
+    }
+  },
+  {
+    "number": 24,
+    "text": "哪个 Linux 命令用于更改文件权限？",
+    "category": "Linux",
+    "options": {
+      "A": "chown",
+      "B": "chmod",
+      "C": "chgrp",
+      "D": "passwd"
+    }
+  },
+  {
+    "number": 25,
+    "text": "什么是SSL/TLS证书？",
+    "category": "Cryptography",
+    "options": {
+      "A": "包含恶意软件的文件",
+      "B": "验证网站身份的数字文档",
+      "C": "用于SSH的私钥",
+      "D": "一种加密数据库"
+    }
+  },
+  {
+    "number": 26,
+    "text": "以下哪一项属于社会工程学攻击？",
+    "category": "Security",
+    "options": {
+      "A": "缓冲区溢出",
+      "B": "网络钓鱼",
+      "C": "SQL 注入",
+      "D": "端口扫描"
+    }
+  },
+  {
+    "number": 27,
+    "text": "Linux命令 \"grep\" 的作用是什么？",
+    "category": "Linux",
+    "options": {
+      "A": "压缩文件",
+      "B": "在文件中搜索文本模式",
+      "C": "显示活动进程",
+      "D": "配置网络"
+    }
+  },
+  {
+    "number": 28,
+    "text": "什么是 VPN？",
+    "category": "Network",
+    "options": {
+      "A": "一种病毒",
+      "B": "一个加密互联网流量的虚拟专用网络",
+      "C": "一种文件传输协议",
+      "D": "一种漏洞扫描器"
+    }
+  },
+  {
+    "number": 29,
+    "text": "什么是 CSRF (Cross-Site Request Forgery)？",
+    "category": "Web Security",
+    "options": {
+      "A": "一种迫使用户浏览器执行未经授权操作的攻击",
+      "B": "一种数据加密方法",
+      "C": "一种网络扫描器",
+      "D": "一种文件压缩技术"
+    }
+  },
+  {
+    "number": 30,
+    "text": "在数据库中存储密码的最佳实践是什么？",
+    "category": "Security",
+    "options": {
+      "A": "明文",
+      "B": "使用AES加密",
+      "C": "加盐哈希",
+      "D": "使用Base64编码"
+    }
+  }
+]