Question 1

Identify the general duties of an RA.

Accepted Answer

Receive, authenticate, and process certificate revocation requests.
Identify and authenticate subscribers.
Obtain a public key from the subscriber.
Verify that the subscriber possesses the asymmetric private key corresponding to the public key submitted for certification.

Question 2

____ can verify the authenticity of the sender and enforce nonrepudiation to prove that the sender is who he claims to be and cannot deny sending it.

Accepted Answer

A)  Symmetric encryption 
B)  Private encryption 
C)  Asymmetric encryption 
D)  Elliptic encryption 
A)  Symmetric encryption 
B)  Private encryption 
C)  Asymmetric encryption 
D)  Elliptic encryption C

Question 3

Explain the difference between key revocation versus key suspension.

Accepted Answer

The revocation of a key is permanent; key suspension is for a set period of time. For example, if an employee is on an extended medical leave, it may be necessary to suspend the use of her key for security reasons. A suspended key can be later reinstated.

Question 4

Digital certificates cannot be used to identify objects other than users.

Accepted Answer

A) True 
 B)False

Question 5

A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.

Accepted Answer

The answer of A(n) ____________________ trust model can be used...

Question 6

____ allows clients and the server to negotiate independently encryption, authentication, and digital signature methods, in any combination, in both directions.

Accepted Answer

A)  SFTP 
B)  SHTTP 
C)  HTTPS 
D)  Telnets 
A)  SFTP 
B)  SHTTP 
C)  HTTPS 
D)  Telnets

Question 7

A class 2 certificate is known as a ____ certificate.

Accepted Answer

A)  signing digital 
B)  server digital 
C)  personal digital 
D)  code-signing 
A)  signing digital 
B)  server digital 
C)  personal digital 
D)  code-signing

Question 8

____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.

Accepted Answer

A)  Blocking 
B)  Hashing 
C)  Encrypting 
D)  Cloning 
A)  Blocking 
B)  Hashing 
C)  Encrypting 
D)  Cloning

Question 9

List three pieces of information a digital certificate typically contains.

Accepted Answer

Owner's name or alias
Owner's public key

Question 10

TLS is an extension of ____.

Accepted Answer

A)  Telnet 
B)  HTTP 
C)  SSL 
D)  FTP 
A)  Telnet 
B)  HTTP 
C)  SSL 
D)  FTP

Question 11

In SSH, the ____________________ command allows a user to log on to a remote computer.

Accepted Answer

The answer of In SSH, the ____________________ command allows a...

Question 12

List the three PKI trust models that use a CA.

Accepted Answer

The models are the hierarchica

Question 13

At the ____ stage of the certificate life cycle, the certificate is no longer valid.

Accepted Answer

A)  creation 
B)  suspension 
C)  revocation 
D)  expiration 
A)  creation 
B)  suspension 
C)  revocation 
D)  expiration

Question 14

List two requirements for verification of an EV SSL.

Accepted Answer

The CA must pass an independent audit ve

Question 15

Cryptography cannot protect data as it is being transported across a network.

Accepted Answer

A) True 
 B)False

Question 16

Match between columns
                        Premises: A published set of rules that govern the operation of a PKI
A technology used to associate a user's identity to a public key that has been "digitally signed" by a trusted third party
A publicly accessible centralized directory of digital certificates that can be used to view the status of a digital certificate
Encrypts only the data portion (payload) of each packet yet leaves the header unencrypted
A set of protocols developed to support the secure exchange of packets
Encrypts both the header and the data portion
A numbered set of PKI standards that have been defined by the RSA Corporation
Describes in detail how the CA uses and manages certificates

Accepted Answer

The Answer of Transport mode and CP and IPsec and is...

Question 17

List and describe the entities for which IPsec is transparent.

Accepted Answer

Applications. Programs do not have to be

Question 18

Key ____________________ dates prevent an attacker who may have stolen a private key from being able to decrypt messages for an indefinite period of time.

Accepted Answer

The answer of Key ____________________ dates prevent an attacker who...

Question 19

____________________ may be defined as confidence in or reliance on another person or entity.

Accepted Answer

The answer of ____________________ may be defined as confidence in...

Question 20

List the four stages of a certificate life cycle.

Accepted Answer

Creation
S

Identify the general duties of an RA.

____ can verify the authenticity of the sender and enforce nonrepudiation to prove that the sender is who he claims to be and cannot deny sending it.

Explain the difference between key revocation versus key suspension.

Digital certificates cannot be used to identify objects other than users.

A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.

____ allows clients and the server to negotiate independently encryption, authentication, and digital signature methods, in any combination, in both directions.

A class 2 certificate is known as a ____ certificate.

____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.

List three pieces of information a digital certificate typically contains.

TLS is an extension of ____.

In SSH, the ____________________ command allows a user to log on to a remote computer.

List the three PKI trust models that use a CA.

At the ____ stage of the certificate life cycle, the certificate is no longer valid.

List two requirements for verification of an EV SSL.

Cryptography cannot protect data as it is being transported across a network.

List and describe the entities for which IPsec is transparent.

Key ____________________ dates prevent an attacker who may have stolen a private key from being able to decrypt messages for an indefinite period of time.

____________________ may be defined as confidence in or reliance on another person or entity.

List the four stages of a certificate life cycle.

Introduction to Security

Malware and Social Engineering Attacks

Application and Network Attacks

Vulnerability Assessment and Mitigating Attacks

Host, Application, and Data Security

Network Security

Administering a Secure Network

Wireless Network Security

Access Control Fundamentals

Authentication and Account Management

Basic Cryptography

Business Continuity

Risk Mitigation

Filters

Exam 12: Advanced Cryptography

Identify the general duties of an RA.

____ can verify the authenticity of the sender and enforce nonrepudiation to prove that the sender is who he claims to be and cannot deny sending it.

Explain the difference between key revocation versus key suspension.

Digital certificates cannot be used to identify objects other than users.

A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.

____ allows clients and the server to negotiate independently encryption, authentication, and digital signature methods, in any combination, in both directions.

A class 2 certificate is known as a ____ certificate.

____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.

List three pieces of information a digital certificate typically contains.

TLS is an extension of ____.

In SSH, the ____________________ command allows a user to log on to a remote computer.

List the three PKI trust models that use a CA.

At the ____ stage of the certificate life cycle, the certificate is no longer valid.

List two requirements for verification of an EV SSL.

Cryptography cannot protect data as it is being transported across a network.

List and describe the entities for which IPsec is transparent.

Key ____________________ dates prevent an attacker who may have stolen a private key from being able to decrypt messages for an indefinite period of time.

____________________ may be defined as confidence in or reliance on another person or entity.

List the four stages of a certificate life cycle.

Introduction to Security

Malware and Social Engineering Attacks

Application and Network Attacks

Vulnerability Assessment and Mitigating Attacks

Host, Application, and Data Security

Network Security

Administering a Secure Network

Wireless Network Security

Access Control Fundamentals

Authentication and Account Management

Basic Cryptography

Business Continuity

Risk Mitigation

Filters