Question 1

Any method of publishing a certificate without a network-access protocol can be classified as ____ sharing.

Accepted Answer

A)  in-line 
B)  real-time 
C)  mail-based 
D)  out-of-band 
A)  in-line 
B)  real-time 
C)  mail-based 
D)  out-of-band D

Question 2

A(n) ____________________ provides a common trusted source for anyone in the PKI community to retrieve certificates.

Accepted Answer

certificate repository

Question 3

Match between columns
                        Premises: a list of certificates that have been revoked and should not be used
a uniform resource identifier (URI) that points to a CPS published by the issuing CA
provides identification of the specific entity involved
the community served by a CA
a process that reliably and securely stores keying material even though the certificate is expired
the underlying foundation or basic framework for a large environment
the simplest form of CRL
publishes certificates so that users can find them
provides a consistent way to send and receive secure MIME data in e-mail

Accepted Answer

The Answer of CA domain and Key history and Entity is...

Question 4

An X.509 v3 certificate ____ extension is a bit string used to indicate the usage supported by the public key of this certificate.

Accepted Answer

A)  certificate policies 
B)  key usage 
C)  private key usage period 
D)  policy mappings 
A)  certificate policies 
B)  key usage 
C)  private key usage period 
D)  policy mappings

Question 5

The foundation of PKI was established approximately 30 years ago with the invention of private key cryptography.

Accepted Answer

A) True 
 B)False

Question 6

Briefly explain the certificate expiration task of the key and certificate life cycle management cancellation phase.

Accepted Answer

All certificates are assigned a fixed li

Question 7

____ is the process in which the identity of an end entity is established and verified.

Accepted Answer

A)  Registration 
B)  Keying material generation 
C)  Certificate creation 
D)  Certificate distribution 
A)  Registration 
B)  Keying material generation 
C)  Certificate creation 
D)  Certificate distribution

Question 8

CRL distribution point (CRL DP) is also called ____.

Accepted Answer

A)  complete CRL 
B)  partitioned CRL 
C)  ARL CRL 
D)  indirect CRL 
A)  complete CRL 
B)  partitioned CRL 
C)  ARL CRL 
D)  indirect CRL

Question 9

The initial creation of the public and private key pair is usually performed in the certificate authority's system.

Accepted Answer

A) True 
 B)False

Question 10

____________________ occurs between the time of learning that the certificate should be revoked and the time that the revocation information is actually posted for the relying parties.

Accepted Answer

The answer of ____________________ occurs between the time of learning...

Question 11

____________________ is the assurance of data privacy and is usually provided by symmetric cryptography using algorithms such as AES and 3DES.

Accepted Answer

The answer of ____________________ is the assurance of data privacy...

Question 12

Explain the main characteristics of indirect CRLs.

Accepted Answer

A single PKI deployment might include se

Question 13

____ is a service that provides the assurance that an entity remains honest about its actions.

Accepted Answer

A)  Nonrepudiation 
B)  Availability 
C)  Integrity 
D)  Confidence 
A)  Nonrepudiation 
B)  Availability 
C)  Integrity 
D)  Confidence

Question 14

What are some of the common tasks of a registration authority?

Accepted Answer

Some of the common tasks of an RA includ

Question 15

The technical term "____" refers to communications that occur outside of previously established communications method or channel.

Accepted Answer

A)  real-time 
B)  in-line 
C)  in-band 
D)  out-of-band 
A)  real-time 
B)  in-line 
C)  in-band 
D)  out-of-band

Question 16

____ is the most common method of certificate revocation.

Accepted Answer

A)  CRL 
B)  OCSP 
C)  ODI 
D)  CPS 
A)  CRL 
B)  OCSP 
C)  ODI 
D)  CPS

Question 17

The core services provided by PKI are ____ , integrity and confidentiality.

Accepted Answer

A)  authentication 
B)  authorization 
C)  availability 
D)  nonrepudiation 
A)  authentication 
B)  authorization 
C)  availability 
D)  nonrepudiation

Question 18

A(n) ____ creates an immediate layer of abstraction for storing revocation information in a more flexible way.

Accepted Answer

A)  partitioned CRL 
B)  complete CRL 
C)  redirect CRL 
D)  indirect CRL 
A)  partitioned CRL 
B)  complete CRL 
C)  redirect CRL 
D)  indirect CRL

Question 19

What are the most common approaches to provide PKI client functionalities?

Accepted Answer

Two approaches are commonly used to prov

Question 20

The most common method of entity authentication is a prompting for a user ID and password.

Accepted Answer

A) True 
 B)False

Any method of publishing a certificate without a network-access protocol can be classified as ____ sharing.

A(n) ____________________ provides a common trusted source for anyone in the PKI community to retrieve certificates.

An X.509 v3 certificate ____ extension is a bit string used to indicate the usage supported by the public key of this certificate.

The foundation of PKI was established approximately 30 years ago with the invention of private key cryptography.

Briefly explain the certificate expiration task of the key and certificate life cycle management cancellation phase.

____ is the process in which the identity of an end entity is established and verified.

CRL distribution point (CRL DP) is also called ____.

The initial creation of the public and private key pair is usually performed in the certificate authority's system.

____________________ occurs between the time of learning that the certificate should be revoked and the time that the revocation information is actually posted for the relying parties.

____________________ is the assurance of data privacy and is usually provided by symmetric cryptography using algorithms such as AES and 3DES.

Explain the main characteristics of indirect CRLs.

____ is a service that provides the assurance that an entity remains honest about its actions.

What are some of the common tasks of a registration authority?

The technical term "____" refers to communications that occur outside of previously established communications method or channel.

____ is the most common method of certificate revocation.

The core services provided by PKI are ____ , integrity and confidentiality.

A(n) ____ creates an immediate layer of abstraction for storing revocation information in a more flexible way.

What are the most common approaches to provide PKI client functionalities?

The most common method of entity authentication is a prompting for a user ID and password.

Introduction to Security Concepts

Software Engineering and Security

Trust and Threat Model

Java Programming Security

Java Api-Level Security Features

Authentication and Authorization With Java

Secure Programming With C and Openssl

Secure Programming With Perl

Identity Management

Security Topics

Filters

Exam 3: Essential Public Key Infrastructure

Any method of publishing a certificate without a network-access protocol can be classified as ____ sharing.

A(n) ____________________ provides a common trusted source for anyone in the PKI community to retrieve certificates.

An X.509 v3 certificate ____ extension is a bit string used to indicate the usage supported by the public key of this certificate.

The foundation of PKI was established approximately 30 years ago with the invention of private key cryptography.

Briefly explain the certificate expiration task of the key and certificate life cycle management cancellation phase.

____ is the process in which the identity of an end entity is established and verified.

CRL distribution point (CRL DP) is also called ____.

The initial creation of the public and private key pair is usually performed in the certificate authority's system.

____________________ occurs between the time of learning that the certificate should be revoked and the time that the revocation information is actually posted for the relying parties.

____________________ is the assurance of data privacy and is usually provided by symmetric cryptography using algorithms such as AES and 3DES.

Explain the main characteristics of indirect CRLs.

____ is a service that provides the assurance that an entity remains honest about its actions.

What are some of the common tasks of a registration authority?

The technical term "____" refers to communications that occur outside of previously established communications method or channel.

____ is the most common method of certificate revocation.

The core services provided by PKI are ____ , integrity and confidentiality.

A(n) ____ creates an immediate layer of abstraction for storing revocation information in a more flexible way.

What are the most common approaches to provide PKI client functionalities?

The most common method of entity authentication is a prompting for a user ID and password.

Introduction to Security Concepts

Software Engineering and Security

Trust and Threat Model

Java Programming Security

Java Api-Level Security Features

Authentication and Authorization With Java

Secure Programming With C and Openssl

Secure Programming With Perl

Identity Management

Security Topics

Filters