Question 1

____ can verify the authenticity of the sender and enforce nonrepudiation to prove that the sender is who he claims to be and cannot deny sending it.

Accepted Answer

A)   Symmetric encryption
B)   Private encryption
C)   Asymmetric encryption
D)   Elliptic encryptionE) A) and C)
F) C) and D) C

Question 2

List the four stages of a certificate life cycle.

Accepted Answer

Creation
S...

Question 3

List two requirements for verification of an EV SSL.

Accepted Answer

The CA must pass an independent audit ve...

Question 4

A class 2 certificate is known as a ____ certificate.

Accepted Answer

A)   signing digital
B)   server digital
C)   personal digital
D)   code-signingE) None of the above
F) All of the above

Question 5

TLS is an extension of ____.

Accepted Answer

A)   Telnet
B)   HTTP
C)   SSL
D)   FTPE) None of the above
F) A) and D)

Question 6

____________________ may be defined as confidence in or reliance on another person or entity.

Accepted Answer

The answer of ____________________ may be defined as confidence in...

Question 7

Digital certificates cannot be used to identify objects other than users.

Accepted Answer

A) True 
 B)False

Question 8

Explain the difference between key revocation versus key suspension.

Accepted Answer

The revocation of a key is permanent; key suspension is for a set period of time. For example, if an employee is on an extended medical leave, it may be necessary to suspend the use of her key for security reasons. A suspended key can be later reinstated.

Question 9

Identify the general duties of an RA.

Accepted Answer

Receive, authenticate, and process certificate revocation requests.
Identify and authenticate subscribers.
Obtain a public key from the subscriber.
Verify that the subscriber possesses the asymmetric private key corresponding to the public key submitted for certification.

Question 10

A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.

Accepted Answer

The answer of A(n) ____________________ trust model can be used...

Question 11

Cryptography cannot protect data as it is being transported across a network.

Accepted Answer

A) True 
 B)False

Question 12

At the ____ stage of the certificate life cycle, the certificate is no longer valid.

Accepted Answer

A)   creation
B)   suspension
C)   revocation
D)   expirationE) B) and C)
F) None of the above

Question 13

Match between columns
                        Premises: A published set of rules that govern the operation of a PKI
A technology used to associate a user's identity to a public key that has been "digitally signed" by a trusted third party
A publicly accessible centralized directory of digital certificates that can be used to view the status of a digital certificate
Encrypts only the data portion (payload) of each packet yet leaves the header unencrypted
A set of protocols developed to support the secure exchange of packets
Encrypts both the header and the data portion
A numbered set of PKI standards that have been defined by the RSA Corporation
Describes in detail how the CA uses and manages certificates

Accepted Answer

The Answer of Transport mode and CP and IPsec and is...

Question 14

List the three PKI trust models that use a CA.

Accepted Answer

The models are the hierarchica...

Question 15

Key ____________________ dates prevent an attacker who may have stolen a private key from being able to decrypt messages for an indefinite period of time.

Accepted Answer

The answer of Key ____________________ dates prevent an attacker who...

Question 16

List three pieces of information a digital certificate typically contains.

Accepted Answer

Owner's name or alias
Owner's public key...

Question 17

____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.

Accepted Answer

A)   Blocking
B)   Hashing
C)   Encrypting
D)   CloningE) B) and C)
F) A) and D)

Question 18

____ allows clients and the server to negotiate independently encryption, authentication, and digital signature methods, in any combination, in both directions.

Accepted Answer

A)   SFTP
B)   SHTTP
C)   HTTPS
D)   TelnetsE) All of the above
F) B) and C)

Question 19

In SSH, the ____________________ command allows a user to log on to a remote computer.

Accepted Answer

The answer of In SSH, the ____________________ command allows a...

Question 20

List and describe the entities for which IPsec is transparent.

Accepted Answer

Applications. Programs do not have to be...

Exam 12: Advanced Cryptography

____ can verify the authenticity of the sender and enforce nonrepudiation to prove that the sender is who he claims to be and cannot deny sending it.

Correct Answer
verified
C

List the four stages of a certificate life cycle.

Correct Answer
verified
Creation
S...
View Answer

List two requirements for verification of an EV SSL.

Correct Answer
verified
The CA must pass an independent audit ve...
View Answer

A class 2 certificate is known as a ____ certificate.

Correct Answer
verified

TLS is an extension of ____.

Correct Answer
verified

____________________ may be defined as confidence in or reliance on another person or entity.

Correct Answer
verified

Digital certificates cannot be used to identify objects other than users.

Correct Answer
verified

Explain the difference between key revocation versus key suspension.

Correct Answer
verified
The revocation of a key is permanent; key suspension is for a set period of time. For example, if an employee is on an extended medical leave, it may be necessary to suspend the use of her key for security reasons. A suspended key can be later reinstated.

Identify the general duties of an RA.

Correct Answer
verified
Receive, authenticate, and process certificate revocation requests. Identify and authenticate subscribers. Obtain a public key from the subscriber. Verify that the subscriber possesses the asymmetric private key corresponding to the public key submitted for certification.

A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.

Correct Answer
verified

Cryptography cannot protect data as it is being transported across a network.

Correct Answer
verified

At the ____ stage of the certificate life cycle, the certificate is no longer valid.

Correct Answer
verified

Match each term with the correct statement below

List the three PKI trust models that use a CA.

Correct Answer
verified
The models are the hierarchica...
View Answer

Key ____________________ dates prevent an attacker who may have stolen a private key from being able to decrypt messages for an indefinite period of time.

Correct Answer
verified

List three pieces of information a digital certificate typically contains.

Correct Answer
verified
Owner's name or alias
Owner's public key...
View Answer

____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.

Correct Answer
verified

____ allows clients and the server to negotiate independently encryption, authentication, and digital signature methods, in any combination, in both directions.

Correct Answer
verified

In SSH, the ____________________ command allows a user to log on to a remote computer.

Correct Answer
verified

List and describe the entities for which IPsec is transparent.

Correct Answer
verified
Applications. Programs do not have to be...
View Answer

Exam 12: Advanced Cryptography

____ can verify the authenticity of the sender and enforce nonrepudiation to prove that the sender is who he claims to be and cannot deny sending it.

Correct AnswerverifiedC

List the four stages of a certificate life cycle.

Correct AnswerverifiedCreationS...View AnswerShow Answer

List two requirements for verification of an EV SSL.

Correct AnswerverifiedThe CA must pass an independent audit ve...View AnswerShow Answer

A class 2 certificate is known as a ____ certificate.

Correct AnswerverifiedShow Answer

TLS is an extension of ____.

Correct AnswerverifiedShow Answer

____________________ may be defined as confidence in or reliance on another person or entity.

Correct AnswerverifiedShow Answer

Digital certificates cannot be used to identify objects other than users.

Correct AnswerverifiedShow Answer

Explain the difference between key revocation versus key suspension.

Correct AnswerverifiedThe revocation of a key is permanent; key suspension is for a set period of time. For example, if an employee is on an extended medical leave, it may be necessary to suspend the use of her key for security reasons. A suspended key can be later reinstated.

Identify the general duties of an RA.

Correct AnswerverifiedReceive, authenticate, and process certificate revocation requests. Identify and authenticate subscribers. Obtain a public key from the subscriber. Verify that the subscriber possesses the asymmetric private key corresponding to the public key submitted for certification.

A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.

Correct AnswerverifiedShow Answer

Cryptography cannot protect data as it is being transported across a network.

Correct AnswerverifiedShow Answer

At the ____ stage of the certificate life cycle, the certificate is no longer valid.

Correct AnswerverifiedShow Answer

Match each term with the correct statement below

List the three PKI trust models that use a CA.

Correct AnswerverifiedThe models are the hierarchica...View AnswerShow Answer

Key ____________________ dates prevent an attacker who may have stolen a private key from being able to decrypt messages for an indefinite period of time.

Correct AnswerverifiedShow Answer

List three pieces of information a digital certificate typically contains.

Correct AnswerverifiedOwner's name or aliasOwner's public key...View AnswerShow Answer

____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.

Correct AnswerverifiedShow Answer

____ allows clients and the server to negotiate independently encryption, authentication, and digital signature methods, in any combination, in both directions.

Correct AnswerverifiedShow Answer

In SSH, the ____________________ command allows a user to log on to a remote computer.

Correct AnswerverifiedShow Answer

List and describe the entities for which IPsec is transparent.

Correct AnswerverifiedApplications. Programs do not have to be...View AnswerShow Answer

Correct Answer
verified
C

Correct Answer
verified
Creation
S...
View Answer

Correct Answer
verified
The CA must pass an independent audit ve...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
The revocation of a key is permanent; key suspension is for a set period of time. For example, if an employee is on an extended medical leave, it may be necessary to suspend the use of her key for security reasons. A suspended key can be later reinstated.

Correct Answer
verified
Receive, authenticate, and process certificate revocation requests. Identify and authenticate subscribers. Obtain a public key from the subscriber. Verify that the subscriber possesses the asymmetric private key corresponding to the public key submitted for certification.

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
The models are the hierarchica...
View Answer

Correct Answer
verified

Correct Answer
verified
Owner's name or alias
Owner's public key...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Applications. Programs do not have to be...
View Answer