Chapter 14

Question 1

public key infrastructure (PKI)

Answer 1

An entire system of hardware and software, policies
and procedures, and people, used to create, distribute, manage, store, and revoke digital
certifi cates.

Question 2

X.509

Answer 2

A common PKI standard developed by the ITU-T that incorporates the single
sign-on authentication method.

Question 3

certificate authority (CA)

Answer 3

The entity (usually a server) that issues digital certifi cates to
users.

Question 4

many-to-one mapping

Answer 4

When multiple certifi cates are mapped to a single recipient.

Question 5

registration authority (RA)

Answer 5

Used to verify requests for certifi cates.

Question 6

certificate revocation list (CRL)

Answer 6

A list of certifi cates no longer valid or that have been
revoked by the issuer.

Question 7

Online Certificate Status Protocol (OCSP)

Answer 7

An alternative to using a certifi cate
revocation list (CRL).It contains less information than a CRL does, and does not
require encryption.

Question 8

key escrow

Answer 8

When certifi cate keys are held in case third parties, such as government or
other organizations, need access to encrypted communications.

Question 9

key recovery agent

Answer 9

Software that can be used to archive and restore keys if necessary.

Question 10

web of trust

Answer 10

A decentralized model used for sharing certifi cates without the need for a
centralized CA.

Question 11

Secure Sockets Layer (SSL)

Answer 11

A cryptographic protocol that provides secure Internet
communications such as web browsing, instant messaging, e-mail, and VoIP.

Question 12

Transport Layer Security (TLS)

Answer 12

The successor to SSL. Provides secure Internet communications.
This is shown in a browser as HTTPS.

Question 13

Secure Shell (SSH)

Answer 13

A protocol that can create a secure channel between two computers
or network devices.

Question 14

Point-to-Point Tunneling Protocol (PPTP)

Answer 14

A tunneling protocol used to support VPNs.

Generally includes security mechanisms, and no additional software or protocols need to
be loaded.

A VPN device or server must have inbound port 1723 open to enable incoming
PPTP connections.

Question 15

Internet Protocol Security (IPsec)

Answer 15

A TCP/IP protocol that authenticates and encrypts
IP packets, effectively securing communications between computers and devices using
the protocol.