Deck 12: Advanced Cryptography

Question 1

A(n) ____ serves as the trusted third-party agency that is responsible for issuing the digital certificates.

A) RA
B) DA
C) CA
D) PA

Answer 1

C

Question 2

The ____ model is the basis for digital certificates issued to Internet users.

A) third-party trust
B) related trust
C) managed trust
D) distributed trust

Answer 2

D

Question 3

____ certificates enable clients connecting to the Web server to examine the identity of the server's owner.

A) Personal digital
B) Public digital
C) Private digital
D) Server digital

Answer 3

D

Question 4

A ____ trust refers to a situation in which two individuals trust each other because each trusts a third party.

A) web of
B) mutual
C) third-party
D) distributed

Question 5

Public keys can be stored by embedding them within digital certificates, while private keys can be stored on the user's local system.

Question 6

____ can verify the authenticity of the sender and enforce nonrepudiation to prove that the sender is who he claims to be and cannot deny sending it.

A) Symmetric encryption
B) Private encryption
C) Asymmetric encryption
D) Elliptic encryption

Question 7

With the ____ model, there is one CA that acts as a "facilitator" to interconnect all other CAs.

A) bridge trust
B) distributed trust
C) third-party trust
D) transitive trust

Question 8

At the ____ stage of the certificate life cycle, the certificate can no longer be used.

A) creation
B) suspension
C) revocation
D) expiration

Question 9

____ can protect the confidentiality of an e-mail message by ensuring that no one has read it.

A) Public encryption
B) Standard encryption
C) Asymmetric encryption
D) Symmetric encryption

Question 10

Digital certificates cannot be used to identify objects other than users.

Question 11

____ involves public-key cryptography standards, trust models, and key management.

A) Public key infrastructure
B) Network key infrastructure
C) Private key infrastructure
D) Shared key infrastructure

Question 12

Security tools function at the same layer of the Open System Interconnection (OSI) model.

Question 13

The ____ provides recommended baseline security requirements for the use and operation of CA, RA, and other PKI components.

A) DP
B) CP
C) LP
D) AP

Question 14

The ____ function is a subordinate entity designed to handle specific CA tasks such as processing certificate requests and authenticating users.

A) Registration Authority
B) Certificate Authority
C) Repudiation Authority
D) Intermediate Authority

Question 15

Cryptography cannot protect data as it is being transported across a network.

Question 16

Digital signatures actually only show that the public key labeled as belonging to person was used to encrypt the digital signature.

Question 17

____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.

A) Blocking
B) Hashing
C) Encrypting
D) Cloning

Question 18

The primary function of a(n) ____ is to verify the identity of the individual.

A) RA
B) CA
C) DA
D) PA

Question 19

____ certificates are frequently used to secure e-mail transmissions and typically only require the user's name and e-mail address in order to receive this certificate.

A) Private digital
B) Personal digital
C) Public digital
D) Server digital

Question 20

A class 2 certificate is known as a ____ certificate.

A) signing digital
B) server digital
C) personal digital
D) code-signing

Question 21

List three general duties of a CA.

Question 22

____________________ may be defined as confidence in or reliance on another person or entity.

Question 23

List the three PKI trust models that use a CA.

Question 24

At the ____ stage of the certificate life cycle, the certificate is no longer valid.

A) creation
B) suspension
C) revocation
D) expiration

Question 25

List the four stages of a certificate life cycle.

Question 26

Key ____________________ dates prevent an attacker who may have stolen a private key from being able to decrypt messages for an indefinite period of time.

Question 27

____ allows clients and the server to negotiate independently encryption, authentication, and digital signature methods, in any combination, in both directions.

A) SFTP
B) SHTTP
C) HTTPS
D) Telnets

Question 28

Explain the difference between key revocation versus key suspension.

Question 29

Explain how digital certificates are managed.

Question 30

List two requirements for verification of an EV SSL.

Question 31

List three pieces of information a digital certificate typically contains.

Question 32

TLS is an extension of ____.

A) Telnet
B) HTTP
C) SSL
D) FTP

Question 33

Key ____ removes all private and public keys along with the user's identification information in the CA.

A) renewal
B) escrow
C) generation
D) destruction

Question 34

In SSH, the ____________________ command allows a user to log on to a remote computer.

Question 35

Key ____ refers to a process in which keys are managed by a third party, such as a trusted CA.

A) escrow
B) destruction
C) renewal
D) management

Question 36

In SSH, the ____________________ command allows a user to copy files between remote computers.

Question 37

A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.

Question 38

____ is a protocol developed by Netscape for securely transmitting documents over the Internet.

A) SSL
B) TLS
C) PEAP
D) EAP

Question 39

Identify the general duties of an RA.

Question 40

Discuss the three areas of protection that are provided by IPsec.

Question 41

List and describe the entities for which IPsec is transparent.