quiz 13

Question 1

Most PKIs use a web of trust model.

Answer 1

False—Most PKIs are centralized, using a central certificate authority.

Question 2

PKIs manage, store, and revoke digital certificates.

Answer 2

True—Public-key infrastructures are an entire system of hardware and software used to create, distribute, manage, store, and revoke digital certificates.

Question 3

If a key pair is generated at a local computer, it is considered to be de-centralized.

Answer 3

True—If the key pair is generated at a local computer, it is decentralized, and the keys are not distributed.

Question 4

Certificates are digitally signed electronic documents that bind a private key with a user identity.

Answer 4

False—Certificates are digitally signed electronic documents that bind a public key with a user identity.

Question 5

Most certificates are based on the X.509 standard.

Answer 5

True—X.509 is a common PKI standard that incorporates the single sign-on authentication method.

Question 6

What is a certificate added to when it is considered to be no longer valid? 
A. Key escrow 
B. CRL 
C. CA 
D. RA

Answer 6

B. When a certificate is no longer considered to be valid, it is added to the certificate revocation list (CRL).

Question 7

Which of the following is best described as when certificate keys are held in the case that third parties such as government or other organizations need access to encrypted communications? 
A. Key escrow 
B. CRL 
C. CA 
D. RA

Answer 7

A. Key escrow is when certificate keys are held by third parties, such as governments or other organizations.

Question 8

Which type of certificate is most commonly used by communications sessions? 
A. Single-sided certificate 
B. Dual-sided certificate 
C. Web of trust 
D. Certificate authority

Answer 8

A. The single-sided certificate is the most commonly used certificate within communications sessions, such as secure web sessions.

Question 9

Which of the following scenarios would not use a PKI? 
A. E-commerce and web logins 
B. Email and other communications 
C. Symmetric key algorithms 
D. Virtual private networks

Answer 9

C Symmetric key algorithms don’t use a PKI. PKIs usually use a symmetric key algorithms but can use symmetric key algorithms as well.

Question 10

Which of the following is used to secure L2TP sessions? 
A. S/MIME 
B. PPTP 
C. SSH 
D. IPsec

Answer 10

D. IPsec is an encryption protocol that can secure L2TP VPN sessions.