Question 1

A(n) ____ serves as the trusted third-party agency that is responsible for issuing the digital certificates.
A) RA
B) DA
C) CA
D) PA

Accepted Answer

CA (Certificate Authority) serves as the trusted third-party agency that is responsible for issuing the digital certificates. RA (Registration Authority) is responsible for identifying and authenticating users and forwarding certificate requests to the CA. DA (Directory Authority) provides information about digital certificates and their status, while PA (Policy Authority) defines the policies and practices for a PKI system.

Question 2

The ____ model is the basis for digital certificates issued to Internet users.
A) third-party trust
B) related trust
C) managed trust
D) distributed trust

Accepted Answer

The distributed trust model is used for digital certificates issued to Internet users. This model involves the distribution of trust among multiple parties, rather than relying on a single third-party authority. This allows for greater security and reliability in the authentication of digital identities.

Question 3

____ certificates enable clients connecting to the Web server to examine the identity of the server's owner.
A) Personal digital
B) Public digital
C) Private digital
D) Server digital

Accepted Answer

Server digital certificates are used to verify the identity of a web server, allowing clients to confirm they are connecting to the legitimate server.

Question 4

A ____ trust refers to a situation in which two individuals trust each other because each trusts a third party.
A) web of
B) mutual
C) third-party
D) distributed

Accepted Answer

A third-party trust involves two individuals trusting each other because they both trust a common third party.

Question 5

Public keys can be stored by embedding them within digital certificates, while private keys can be stored on the user's local system.

Accepted Answer

This is a common method of storing public and private keys. The public key can be embedded within a digital certificate, which is then distributed to others. The private key should be kept secure on the user's local system.

Question 6

____ can verify the authenticity of the sender and enforce nonrepudiation to prove that the sender is who he claims to be and cannot deny sending it.
A) Symmetric encryption
B) Private encryption
C) Asymmetric encryption
D) Elliptic encryption

Accepted Answer

Asymmetric encryption uses a public key to encrypt the message and a private key to decrypt it. The sender signs the message with their private key, which verifies the authenticity of the sender and prevents them from denying sending it, providing nonrepudiation.

Question 7

With the ____ model, there is one CA that acts as a "facilitator" to interconnect all other CAs.
A) bridge trust
B) distributed trust
C) third-party trust
D) transitive trust

Accepted Answer

In a bridge trust model, there is one CA that acts as a "facilitator" to interconnect all other CAs, providing trust between them. This type of trust model allows for a more centralized control over the trust relationships within a network. The other listed options do not fit this description.

Question 8

At the ____ stage of the certificate life cycle, the certificate can no longer be used.
A) creation
B) suspension
C) revocation
D) expiration

Accepted Answer

The expiration stage is the point at which the certificate is no longer valid and can no longer be used. This is the natural end of a certificate's life cycle, after which it must be renewed, revoked, or replaced. The creation stage is the beginning of the life cycle, when the certificate is first issued. Suspension is a temporary state in which the certificate is still valid but not currently in use, while revocation is the stage at which the certificate is officially invalidated by the issuing authority.

Question 9

____ can protect the confidentiality of an e-mail message by ensuring that no one has read it.
A) Public encryption
B) Standard encryption
C) Asymmetric encryption
D) Symmetric encryption

Accepted Answer

Symmetric encryption can protect the confidentiality of an e-mail message by ensuring that no one has read it. This method uses a single key to encrypt and decrypt the message, ensuring that only the intended recipient with the corresponding key can read the message. Other forms of encryption, such as public and asymmetric encryption, can also provide confidentiality, but symmetric encryption is the most common method used for e-mail communication.

Question 10

Digital certificates cannot be used to identify objects other than users.

Accepted Answer

Digital certificates can be used to identify objects other than users, such as devices or servers. Digital certificates can be assigned to these objects to enable secure communication and authentication.

Question 11

____ involves public-key cryptography standards, trust models, and key management.
A) Public key infrastructure
B) Network key infrastructure
C) Private key infrastructure
D) Shared key infrastructure

Accepted Answer

Public key infrastructure (PKI) involves the use of public-key cryptography standards to ensure secure communication between parties. It includes trust models to establish the authenticity of digital certificates and key management processes to ensure the confidentiality and integrity of private keys. Network key infrastructure (NKI) and shared key infrastructure (SKI) are not commonly used terms in the field of cryptography. Private key infrastructure (PKI) is not a recognized term and may cause confusion with PKI.

Question 12

Security tools function at the same layer of the Open System Interconnection (OSI) model.

Accepted Answer

Security tools can operate at different layers of the OSI model depending on their purpose. For example, firewalls can operate at the network layer (layer 3), while encryption and decryption tools can operate at the presentation layer (layer 6) or application layer (layer 7).

Question 13

The ____ provides recommended baseline security requirements for the use and operation of CA, RA, and other PKI components.
A) DP
B) CP
C) LP
D) AP

Accepted Answer

The CP (Certification Practice) provides recommended baseline security requirements for the use and operation of Certificate Authorities (CA), Registration Authorities (RA), and other components of a Public Key Infrastructure (PKI). The CP outlines the policies and procedures used by the CA to validate subject identity, issue certificates, and maintain the security and integrity of the PKI. The CP is a critical document that defines the trust model and security controls used by the PKI, and it is typically accompanied by a Certificate Policy (CP) that defines the use case and issuance criteria for the PKI.

Question 14

The ____ function is a subordinate entity designed to handle specific CA tasks such as processing certificate requests and authenticating users.
A) Registration Authority
B) Certificate Authority
C) Repudiation Authority
D) Intermediate Authority

Accepted Answer

The Registration Authority (RA) is a subordinate entity within a public key infrastructure (PKI) that handles specific tasks such as processing certificate requests and authenticating users. The RA works closely with the Certificate Authority (CA) to verify the identity of the requestor, and then sends the request to the CA for approval and issuance of a digital certificate. The RA is responsible for enforcing the security policies set by the CA and maintaining the accuracy of the data in the digital certificates. The Repudiation Authority (RAu) and Intermediate Authority (IA) are not directly involved in handling specific CA tasks.

Question 15

Cryptography cannot protect data as it is being transported across a network.

Accepted Answer

Cryptography can protect data while it is being transported across a network by encrypting the data before sending it and decrypting it upon arrival. Different cryptographic methods such as SSL/TLS and VPNs can be used to provide secure communication over a network.

Question 16

Digital signatures actually only show that the public key labeled as belonging to person was used to encrypt the digital signature.

Accepted Answer

Digital signatures are used to verify the authenticity of a digital message or document. They are created by using a private key to encrypt a hash of the message. The public key is then used to decrypt the signature and verify that the message has not been tampered with.

Question 17

____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.
A) Blocking
B) Hashing
C) Encrypting
D) Cloning

Accepted Answer

Hashing is the process of generating a fixed-length code, called a hash, from a file or data. This hash can be used to ensure the integrity of the file by guaranteeing that no one has tampered with it. If the hash value of the file changes, it means that the file has been altered in some way, and it can no longer be considered the same file. Therefore, hashing is one of the most effective ways to ensure the integrity of a file.

Question 18

The primary function of a(n) ____ is to verify the identity of the individual.
A) RA
B) CA
C) DA
D) PA

Accepted Answer

An RA (Registration Authority) is responsible for verifying the identity of individuals before they are issued digital certificates by a CA (Certificate Authority).

Question 19

____ certificates are frequently used to secure e-mail transmissions and typically only require the user's name and e-mail address in order to receive this certificate.
A) Private digital
B) Personal digital
C) Public digital
D) Server digital

Accepted Answer

Personal digital certificates, also known as client certificates, are commonly used to secure e-mail transmissions. They typically only require the user's name and e-mail address to obtain and authenticate the user's identity. Private digital certificates are used for authentication of servers or devices, public digital certificates for website security, and server digital certificates for authentication of servers in network communications.

Question 20

A class 2 certificate is known as a ____ certificate.
A) signing digital
B) server digital
C) personal digital
D) code-signing

Accepted Answer

The answer of A class 2 certificate is known as...

Quiz 12: Advanced Cryptography

A(n) ____ serves as the trusted third-party agency that is responsible for issuing the digital certificates.

The ____ model is the basis for digital certificates issued to Internet users.

____ certificates enable clients connecting to the Web server to examine the identity of the server's owner.

A ____ trust refers to a situation in which two individuals trust each other because each trusts a third party.

Public keys can be stored by embedding them within digital certificates, while private keys can be stored on the user's local system.

____ can verify the authenticity of the sender and enforce nonrepudiation to prove that the sender is who he claims to be and cannot deny sending it.

With the ____ model, there is one CA that acts as a "facilitator" to interconnect all other CAs.

At the ____ stage of the certificate life cycle, the certificate can no longer be used.

____ can protect the confidentiality of an e-mail message by ensuring that no one has read it.

Digital certificates cannot be used to identify objects other than users.

____ involves public-key cryptography standards, trust models, and key management.

Security tools function at the same layer of the Open System Interconnection (OSI) model.

The ____ provides recommended baseline security requirements for the use and operation of CA, RA, and other PKI components.

The ____ function is a subordinate entity designed to handle specific CA tasks such as processing certificate requests and authenticating users.

Cryptography cannot protect data as it is being transported across a network.

Digital signatures actually only show that the public key labeled as belonging to person was used to encrypt the digital signature.

____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.

The primary function of a(n) ____ is to verify the identity of the individual.

____ certificates are frequently used to secure e-mail transmissions and typically only require the user's name and e-mail address in order to receive this certificate.

A class 2 certificate is known as a ____ certificate.