Question 1

A trust domain is defined as

Accepted Answer

A)  The agreed upon,trusted third party
B)  A scenario where one user needs to validate the other's certificate
C)  A construct of systems,personnel,applications,protocols,technologies and policies that work together to provide a certain level of protection
D)  A scenario in which the certificate's issuer and subject fields hold the same informationE) C) and D)
F) A) and B)

Question 2

A(n)_______________ certificate is used when independent CAs establish peer-to-peer trust relationships.

Accepted Answer

cross-certification

Question 3

What is a certificate repository?

Accepted Answer

A)  A directory that calculates a message digest for the certificate
B)  An entity that generates electronic credentials
C)  A directory that requires a centralized infrastructure
D)  A centralized directory in which the registered certificate is storedE) B) and D)
F) All of the above

Question 4

How is an outsourced CA different from a public CA?

Accepted Answer

A)  The CA is implemented,maintained,and controlled by the company that implemented it.
B)  The CA is already established and being used by many individuals and companies.
C)  The CA provides more flexibility for companies.
D)  It provides dedicated services,and possibly equipment,to an individual company.E) B) and C)
F) All of the above

Question 5

A process of giving keys to a third party so that they can decrypt and read sensitive information is

Accepted Answer

A)  Key recovery
B)  Key escrow
C)  Key archiving system
D)  Private key protectionE) B) and D)
F) All of the above

Question 6

_______________ is the standard used for creating and formatting certificates.

Accepted Answer

The answer of _______________ is the standard used for creating...

Question 7

A digital certificate binds an individual's identity to a public key.

Accepted Answer

A) True 
 B)False

Question 8

The list of serial numbers of certificates that have been revoked is called the _______________.

Accepted Answer

certificat...

Question 9

Why construct and implement a PKI?

Accepted Answer

A)  To eliminate certificate authorities
B)  To provide identification to individuals and ensure availability
C)  To provide a higher level of trust than can be obtained through other applications and protocols
D)  To enable a centralized directory in which to store the registered certificate and distribute private keys to users requesting themE) A) and D)
F) B) and D)

Question 10

_______________ binds a public key to a known user through a trusted intermediary,typically a certificate authority.

Accepted Answer

Public key...

Question 11

Which of the following reasons would be appropriate for a certificate suspension rather than revocation?

Accepted Answer

A)  All keys are compromised.
B)  Changed affiliation.
C)  An extended vacation.
D)  The certificate is no longer needed,but no reason exists to suspect that it has been compromised.E) B) and D)
F) A) and B)

Question 12

What is a certificate authority?

Accepted Answer

A)  An entity that requires proof of identity from the individual requesting a certificate
B)  An entity that generates a digitally signed identification certificate
C)  A centralized directory in which the registered certificate is stored
D)  An entity that generates electronic credentialsE) C) and D)
F) None of the above

Question 13

Which of the following is a critical concept common to all PKIs?

Accepted Answer

A)  Cryptographic hardware is required for PKI construction.
B)  The server that centrally stores the keys should not be available.
C)  The private key must be computer generated and centrally stored.
D)  Private keys must remain private.E) B) and C)
F) None of the above

Question 14

When a person loses a laptop that had a private key stored on it,that person should request a revocation of the related certificate.

Accepted Answer

A) True 
 B)False

Question 15

If the root CA's private key were compromised,what would happen?

Accepted Answer

A)  Subordinate CAs and end users would be unaffected.
B)  Subordinate CAs would also be compromised,but users would be unaffected.
C)  Subordinate CAs and end users would be affected.
D)  Only the root CA would be affected.E) All of the above
F) B) and D) C

Question 16

A(n)_______________ is a construct of systems,personnel,applications,protocols,technologies,and policies that work together to provide a certain level of protection.

Accepted Answer

trust domain

Question 17

What are centralized and decentralized infrastructures? Explain why you might choose one over the other.

Accepted Answer

In a decentralized approach,software on ...

Question 18

The term used to describe a centralized directory that can be accessed by a subset of individuals is _______________

Accepted Answer

certificat...

Question 19

What is a digital certificate?

Accepted Answer

A)  It's a means of establishing the validity of an offer from a person,entity,web site or e-mail.
B)  It's a centralized directory wherein registered keys are created and stored.
C)  It's a means of establishing your credentials electronically when doing business or other transactions on the Web
D)  It's an entity that generates electronic credentials and distributes them upon proving their identity sufficiently.E) C) and D)
F) A) and D)

Question 20

What are the different fields within a digital certificate?

Accepted Answer

A)  Version number,subject,public key,issuer,serial number,validity,certificate usage,signature algorithm,and extensions
B)  Key encipherment,data encipherment,CRL sign,keycert sign,and nonrepudiation
C)  End-entity,CA,cross-certification,and policy certification
D)  CA identity,individual or party identification,company,and destinationE) A) and B)
F) A) and D)

Exam 6: Public Key Infrastructure

A trust domain is defined as

Correct AnswerverifiedShow Answer

A(n)_______________ certificate is used when independent CAs establish peer-to-peer trust relationships.

Correct Answerverifiedcross-certification

What is a certificate repository?

Correct AnswerverifiedShow Answer

How is an outsourced CA different from a public CA?

Correct AnswerverifiedShow Answer

A process of giving keys to a third party so that they can decrypt and read sensitive information is

Correct AnswerverifiedShow Answer

_______________ is the standard used for creating and formatting certificates.

Correct AnswerverifiedShow Answer

A digital certificate binds an individual's identity to a public key.

Correct AnswerverifiedShow Answer

The list of serial numbers of certificates that have been revoked is called the _______________.

Correct Answerverifiedcertificat...View AnswerShow Answer

Why construct and implement a PKI?

Correct AnswerverifiedShow Answer

_______________ binds a public key to a known user through a trusted intermediary,typically a certificate authority.

Correct AnswerverifiedPublic key...View AnswerShow Answer

Which of the following reasons would be appropriate for a certificate suspension rather than revocation?

Correct AnswerverifiedShow Answer

What is a certificate authority?

Correct AnswerverifiedShow Answer

Which of the following is a critical concept common to all PKIs?

Correct AnswerverifiedShow Answer

When a person loses a laptop that had a private key stored on it,that person should request a revocation of the related certificate.

Correct AnswerverifiedShow Answer

If the root CA's private key were compromised,what would happen?

Correct AnswerverifiedC

A(n)_______________ is a construct of systems,personnel,applications,protocols,technologies,and policies that work together to provide a certain level of protection.

Correct Answerverifiedtrust domain

What are centralized and decentralized infrastructures? Explain why you might choose one over the other.

Correct AnswerverifiedIn a decentralized approach,software on ...View AnswerShow Answer

The term used to describe a centralized directory that can be accessed by a subset of individuals is _______________

Correct Answerverifiedcertificat...View AnswerShow Answer

What is a digital certificate?

Correct AnswerverifiedShow Answer

What are the different fields within a digital certificate?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified
cross-certification

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
certificat...
View Answer

Correct Answer
verified

Correct Answer
verified
Public key...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
C

Correct Answer
verified
trust domain

Correct Answer
verified
In a decentralized approach,software on ...
View Answer

Correct Answer
verified
certificat...
View Answer

Correct Answer
verified

Correct Answer
verified