2023年上海软件水平考试考试真题卷（3）.docx

《2023年上海软件水平考试考试真题卷（3）.docx》由会员分享，可在线阅读，更多相关《2023年上海软件水平考试考试真题卷（3）.docx（26页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、2023年上海软件水平考试考试真题卷（3）本卷共分为1大题50小题，作答时间为180分钟，总分100分，60分及格。一、单项选择题（共50题，每题2分。每题的备选项中，只有一个最符合题意） 1.数字证书采用公钥体制进行加密和解密。每个用户有一个私钥，用它进行_；同时每个用户还有一个公钥，用于_。X.509标准规定，数字证书由_发放，将其放入公共目录中，以供用户访问。X.509数字证书中的签名字段是指_。如果用户UA从A地的发证机构取得了证书，用户UB从B地的发证机构取得了证书，那么_。A解密和验证B解密和签名C加密和签名D加密和验证2.The purpose of the requiremen

2、ts definition phase is to produce a clear, complete, consistent, and testable _ of the technical requirements for the software product During the requirements definition phase, the requirements definition team uses an iterative process to expand abroad statement of the system requirements into a com

3、plete and detailed specification of each function that the software must perform and each _ that it must meetThe starting point is usually a set of high-level requirements from the _ that describe the project or problem In either case, the requirements definition team formulates an overall concept f

4、or the system and the defines _ showing how the system will be operated, publishes the system and operation concept documents, and conducts a system concept review(SCR) Following the SCR, the team derives _ requirements for the system from the high-level requirements and the system operations concep

5、tUsing structured or object-oriented analysis, the team specifies the software functions and algorithms needed to satisfy each detailed requirementsAcriterionBstandardCmodelDsystem3.数字证书采用公钥体制进行加密和解密。每个用户有一个私钥，用它进行_；同时每个用户还有一个公钥，用于_。X.509标准规定，数字证书由_发放，将其放入公共目录中，以供用户访问。X.509数字证书中的签名字段是指_。如果用户UA从A地的发证

6、机构取得了证书，用户UB从B地的发证机构取得了证书，那么_。A密钥分发中心B证书授权中心C国际电信联盟D当地政府4.The purpose of the requirements definition phase is to produce a clear, complete, consistent, and testable _ of the technical requirements for the software product During the requirements definition phase, the requirements definition team use

7、s an iterative process to expand abroad statement of the system requirements into a complete and detailed specification of each function that the software must perform and each _ that it must meetThe starting point is usually a set of high-level requirements from the _ that describe the project or p

8、roblem In either case, the requirements definition team formulates an overall concept for the system and the defines _ showing how the system will be operated, publishes the system and operation concept documents, and conducts a system concept review(SCR) Following the SCR, the team derives _ requir

9、ements for the system from the high-level requirements and the system operations conceptUsing structured or object-oriented analysis, the team specifies the software functions and algorithms needed to satisfy each detailed requirementsAproducerBcustomerCprogrammerDanalyser5.数字证书采用公钥体制进行加密和解密。每个用户有一个

10、私钥，用它进行_；同时每个用户还有一个公钥，用于_。X.509标准规定，数字证书由_发放，将其放入公共目录中，以供用户访问。X.509数字证书中的签名字段是指_。如果用户UA从A地的发证机构取得了证书，用户UB从B地的发证机构取得了证书，那么_。A用户对自己证书的签名B用户对发送报文的签名C发证机构对用户证书的签名D发证机构对发送报文的签名6.The purpose of the requirements definition phase is to produce a clear, complete, consistent, and testable _ of the technical r

11、equirements for the software product During the requirements definition phase, the requirements definition team uses an iterative process to expand abroad statement of the system requirements into a complete and detailed specification of each function that the software must perform and each _ that i

12、t must meetThe starting point is usually a set of high-level requirements from the _ that describe the project or problem In either case, the requirements definition team formulates an overall concept for the system and the defines _ showing how the system will be operated, publishes the system and

13、operation concept documents, and conducts a system concept review(SCR) Following the SCR, the team derives _ requirements for the system from the high-level requirements and the system operations conceptUsing structured or object-oriented analysis, the team specifies the software functions and algor

14、ithms needed to satisfy each detailed requirementsArulesBprinciplesCscenariosDscenes7.数字证书采用公钥体制进行加密和解密。每个用户有一个私钥，用它进行_；同时每个用户还有一个公钥，用于_。X.509标准规定，数字证书由_发放，将其放入公共目录中，以供用户访问。X.509数字证书中的签名字段是指_。如果用户UA从A地的发证机构取得了证书，用户UB从B地的发证机构取得了证书，那么_。AUA可使用自己的证书直接与UB进行安全通信BUA通过一个证书链可以与UB进行安全通信CUA和UB还须向对方的发证机构申请证书，才能

15、进行安全通信DUA和UB都要向国家发证机构申请证书，才能进行安全通信8.The purpose of the requirements definition phase is to produce a clear, complete, consistent, and testable _ of the technical requirements for the software product During the requirements definition phase, the requirements definition team uses an iterative process

16、 to expand abroad statement of the system requirements into a complete and detailed specification of each function that the software must perform and each _ that it must meetThe starting point is usually a set of high-level requirements from the _ that describe the project or problem In either case,

17、 the requirements definition team formulates an overall concept for the system and the defines _ showing how the system will be operated, publishes the system and operation concept documents, and conducts a system concept review(SCR) Following the SCR, the team derives _ requirements for the system

18、from the high-level requirements and the system operations conceptUsing structured or object-oriented analysis, the team specifies the software functions and algorithms needed to satisfy each detailed requirementsAdetailedBoutlinedCtotalDcomplete9.设有职工EMP(职工号，姓名，性别，部门号，职务，进单位时间，电话)，职务JOB(职务，月薪)和部门DE

19、PT(部门号，部门名称，部门电话，负责人)实体集。一个职务可以由多个职工担任，但一个职工只能担任一个职务，并属于一个部门，部门负责人是一个职工。如图6-7所示的E-R图中，a、b处的实体名分别为 (54) ；图中a、b之间为 (55) 联系。（54）处填（）。ADEPT、EMPBEMP、DEPTCJOB、EMPDEMP、JOB10.Microsoft’s COM is a software (71) that allows applications to be built from binary software components. COM is the underlying

20、architecture that forms the foundation for higher-level software services, like those provided by OLE. COM defines a binary standard for function calling between components, a way for components to dynamically discover the interfaces implemented by other components, and a mechanism to identify compo

21、nents and their interfaces uniquely.OLE is a compound (72) standard developed by Microsoft. OLE makes it possible to create (73) with one application and link or embed them in a second application. Embedded objects retain their original format and (74) to the application that created them. Support f

22、or OLE is built into the Windows and MacOS Operating Systems. A (75) compound document standard developed mainly by Apple and IBM is called OpenDoc.（71）处填（）。AstructureBprocedureCprotocolDarchitecture11.在一个客户信息系统中存在两种类型的客户：个人客户和集团客户。对于个人客户，系统中保存了其客户标识和基本信息(包括姓名、住宅电话和E-mail)；对于集团客户，系统中保存了其客户标识，以及与该集团客

23、户相关的若干个联系人的信息(联系人的信息包括姓名、住宅电话、E-mail、办公电话和职位)。根据上述描述，得到了如图6-5所示的UML类图，其中类客户的属性有 (41) ；类人的属性有 (42) 。（41）处填（）。A客户标识B姓名、住宅电话、E-mailC姓名、住宅电户、办公电话、E-mail、职位D客户标识、办公电话、职位12.若对表6-2按（）进行运算，可以得到表6-3。Aσ条形码=′01020211′v′02110200′(表1)Bσ商品名=′毛巾′v′铅笔′(表1)

24、Cσ价格≥8(表1)Dπ1,2,3(表1)13.为便于存储和处理一般树结构形式的信息，常采用孩子一兄弟表示法将其转换成二叉树(左子关系表示父子、右子关系表示兄弟)，与图6-8所示的树对应的二叉树是（）。A.AB.BC.CD.D14.某计算机的时钟频率为600MHz，测试该计算机的程序使用4种类型的指令。每种指令的数量及所需指令时钟数(CPI)如表6-1所示，则该计算机的运算速度约为（）。A106.76B207.32C308.64D1166.4015.根据McCabe环路复杂性度量，如图4-5所示的程序图的复杂度是 (31) ，对该程序进行路径覆盖测试，可得到的基本路径是

25、 (32) 。（31）处填（）。A2B3C4D516.UML提供了5种对系统动态方面建模的图，其中 (49) 对系统行为组织和建模； (50) 之间是同构的。（49）处填（）。A用例图B协作图C状态图D序列图17.某数据库中有员工关系E、产品关系P、仓库关系W和库存关系I，其中：员工关系E(employeeID,name,department)中的属性为：员工编号，姓名，部门；产品关系P(productID,name,model,size,color)中的属性为：产品编号，产品名称，型号，尺寸，颜色；仓库关系W(warehouseID,name,address,employeeID)中的属性为

26、：仓库编号，仓库名称，地址，负责人编号；库存关系I(warehouseID,productID,quantity)中的属性为仓库编号，产品编号和产品数量。若要求仓库关系的负责人引用员工关系E的员工编号、员工关系E的员工编号、仓库关系W的仓库编号和产品关系P的产品编号不能为空且唯一标识一个记录，并且仓库的地址不能为空，则依次要满足的完整性约束是 (52) 。若需得到每种产品的名称和该产品的总库存量，则对应的查询语句为：（52）处填（）。A实体完整性、参照完整性、用户定义完整性B参照完整性、实体完整性、用户定义完整性C用户定义完整性、实体完整性、参照完整性D实体完整性、用户定义完整性、参照完整性1

27、8.某数据库中有员工关系E、产品关系P、仓库关系W和库存关系I，其中：员工关系E(employeeID,name,department)中的属性为：员工编号，姓名，部门；产品关系P(productID,name,model,size,color)中的属性为：产品编号，产品名称，型号，尺寸，颜色；仓库关系W(warehouseID,name,address,employeeID)中的属性为：仓库编号，仓库名称，地址，负责人编号；库存关系I(warehouseID,productID,quantity)中的属性为仓库编号，产品编号和产品数量。若要求仓库关系的负责人引用员工关系E的员工编号、员工关系

28、E的员工编号、仓库关系W的仓库编号和产品关系P的产品编号不能为空且唯一标识一个记录，并且仓库的地址不能为空，则依次要满足的完整性约束是 (52) 。若需得到每种产品的名称和该产品的总库存量，则对应的查询语句为：（53）处填（）。AP.productID=I.productlD；BP.productID=I.product ID ORDER BY name；CP.productID=I.product ID GROUP BY name；DP.productID=I.product ID GROUP BY name，quantity。19.Microsoft’s COM is a so

29、ftware (71) that allows applications to be built from binary software components. COM is the underlying architecture that forms the foundation for higher-level software services, like those provided by OLE. COM defines a binary standard for function calling between components, a way for components t

30、o dynamically discover the interfaces implemented by other components, and a mechanism to identify components and their interfaces uniquely.OLE is a compound (72) standard developed by Microsoft. OLE makes it possible to create (73) with one application and link or embed them in a second application

31、. Embedded objects retain their original format and (74) to the application that created them. Support for OLE is built into the Windows and MacOS Operating Systems. A (75) compound document standard developed mainly by Apple and IBM is called OpenDoc.（72）处填（）。AtextBdatabaseCdocumentDgraphic20.UML提供

32、了5种对系统动态方面建模的图，其中 (49) 对系统行为组织和建模； (50) 之间是同构的。（50）处填（）。A状态图和活动图B用例图和活动图C序列图和协作图D活动图和协作图21.根据McCabe环路复杂性度量，如图4-5所示的程序图的复杂度是 (31) ，对该程序进行路径覆盖测试，可得到的基本路径是 (32) 。（32）处填（）。AABCHIK；ABCHJK；ABCDEFGBABCHIK；ABCHJK；ABCDEFGCHIK； ABCDEGCHIKCABCHIK；ABCHJK；ABCDEFGCHIK； ABDEGCHJKDABCHIK；ABCHJK：ABCDEFGCHIK； ABCDEFG

33、CHJK；ABCDEGCHIK22.设有职工EMP(职工号，姓名，性别，部门号，职务，进单位时间，电话)，职务JOB(职务，月薪)和部门DEPT(部门号，部门名称，部门电话，负责人)实体集。一个职务可以由多个职工担任，但一个职工只能担任一个职务，并属于一个部门，部门负责人是一个职工。如图6-7所示的E-R图中，a、b处的实体名分别为 (54) ；图中a、b之间为 (55) 联系。（55）处填（）。A.AB.BC.CD.D23.在一个客户信息系统中存在两种类型的客户：个人客户和集团客户。对于个人客户，系统中保存了其客户标识和基本信息(包括姓名、住宅电话和E-mail)；对于集团客户，系统中保存了

34、其客户标识，以及与该集团客户相关的若干个联系人的信息(联系人的信息包括姓名、住宅电话、E-mail、办公电话和职位)。根据上述描述，得到了如图6-5所示的UML类图，其中类客户的属性有 (41) ；类人的属性有 (42) 。（42）处填（）。A客户标识B姓名、住宅电话、E-mailC姓名、住宅电户、办公电话、E-mail、职位D客户标识、办公电话、职位24.Microsoft’s COM is a software (71) that allows applications to be built from binary software components. COM is th

35、e underlying architecture that forms the foundation for higher-level software services, like those provided by OLE. COM defines a binary standard for function calling between components, a way for components to dynamically discover the interfaces implemented by other components, and a mechanism to i

36、dentify components and their interfaces uniquely.OLE is a compound (72) standard developed by Microsoft. OLE makes it possible to create (73) with one application and link or embed them in a second application. Embedded objects retain their original format and (74) to the application that created th

37、em. Support for OLE is built into the Windows and MacOS Operating Systems. A (75) compound document standard developed mainly by Apple and IBM is called OpenDoc.（73）处填（）。AobjectsBeventCtableDfunction25.Microsoft’s COM is a software (71) that allows applications to be built from binary software

38、 components. COM is the underlying architecture that forms the foundation for higher-level software services, like those provided by OLE. COM defines a binary standard for function calling between components, a way for components to dynamically discover the interfaces implemented by other components

39、, and a mechanism to identify components and their interfaces uniquely.OLE is a compound (72) standard developed by Microsoft. OLE makes it possible to create (73) with one application and link or embed them in a second application. Embedded objects retain their original format and (74) to the appli

40、cation that created them. Support for OLE is built into the Windows and MacOS Operating Systems. A (75) compound document standard developed mainly by Apple and IBM is called OpenDoc.（74）处填（）。AaddressBcharacteristicsCpageDlinks26.Microsoft’s COM is a software (71) that allows applications to b

41、e built from binary software components. COM is the underlying architecture that forms the foundation for higher-level software services, like those provided by OLE. COM defines a binary standard for function calling between components, a way for components to dynamically discover the interfaces imp

42、lemented by other components, and a mechanism to identify components and their interfaces uniquely.OLE is a compound (72) standard developed by Microsoft. OLE makes it possible to create (73) with one application and link or embed them in a second application. Embedded objects retain their original

43、format and (74) to the application that created them. Support for OLE is built into the Windows and MacOS Operating Systems. A (75) compound document standard developed mainly by Apple and IBM is called OpenDoc.（75）处填（）。AcontainedBcompetingCconnectingDcompleting27.下列网络攻击行为中，属于DoS攻击的_。A特洛伊木马攻击BSYN Fl

44、ooding攻击C端口欺骗攻击DIP欺骗攻击28.下面算法中，不属于公开密钥加密算法的是_。AECCBDSACRSADDES29.利用三重DES进行加密，以下说法正确的是_。A三重DES的密钥长度是56位B三重DES使用三个不同的密钥进行加密C三重DES的安全性高于DESD三重DES的加密速度比DES快30.SDES是一种_算法。A共享密钥B公开密钥C报文摘要D访问控制31.公钥体系中，用户甲发送给用户乙的数据要用（）进行加密。A甲的公钥B甲的私钥C乙的公钥D乙的私钥32.以下关于加密算法的叙述中，正确的是_。ADES算法采用128位的密钥进行加密BDES算法采用两个不同的密钥进行加密C三重D

45、ES算法采用3个不同的密钥进行加密D三重DES算法采用2个不同的密钥进行加密33.某报文的长度是1000字节，利用MD5计算出来的报文摘要长度是_位，利用SHA计算出来的报文摘要长度是_位。A64B128C256D16034.按照RSA算法，若选两奇数p=5，q=3，公钥e=7，则私钥d为_。A6B7C8D935.公钥体系中，私钥用于_，公钥用于_。A解密和签名B加密和签名C解密和认证D加密和认证36.某报文的长度是1000字节，利用MD5计算出来的报文摘要长度是_位，利用SHA计算出来的报文摘要长度是_位。A64B128C256D16037.IEEE802.11i所采用的加密算法为_。ADE

46、SB3DESCIDEADAES38.利用报文摘要算法生成报文摘要的目的是_。A验证通信对方的身价，防止假冒B对传输数据进行加密，防止数据被窃听C防止发送方否认发送过的数据D防止发送的报文被篡改39.PKI体制中，保证数字证书不被篡改的方法是_。A用CA的私钥对数字证书签名B用CA的公钥对数字证书签名C用证书主人的私钥对数字证书签名D用证书主人的公钥对数字证书签名40.公钥体系中，私钥用于_，公钥用于_。A解密和签名B加密和签名C解密和认证D加密和认证41.甲和乙要进行通信，甲对发送的消息附加了数字签名，乙收到该消息后利用_验证该消息的真实性。A甲的公钥B甲的私钥C乙的公钥D乙的私钥42.报文摘要算法SHA-1输出的位数是_。A100位B128位C160位D180位43.下列算法中，_属于摘要算法。ADESBMD5CDiffie-HellmanDAES44.用户B收到用户A带数字签名的消息M，为了验证M的真实性，首先需要从CA获取用户的数字证书，并利用_验证该