COMPSCI 455

Question 1

True or False, The public key in any public key cryptosystem is always used for encryption, and private key for decryption

Answer 1

False

Question 2

In what scenario is private key cryptography preferred over public key?

Answer 2

Bulk data encryption

Question 3

In what scenario is public key cryptography preferred over private key?

Answer 3

Authentication

Question 4

What scenario is public and private key cryptography used in tandem?

Answer 4

Public key to exchange a session key and a private session key for bulk data en/decryption

Question 5

A user of direct digital signature could claim that their private key was stolen and used to sign fraudulent messages. How do we prevent this ploy?

Answer 5

Include a timestamp with each digital signature and enforce a policy of frequent key changes

Question 6

Why are X.509 certificates preferred over a PKA?

Answer 6

Users can authenticate one another using certificates without lengthy transactions with a third party

Question 7

Who can verify the integrity of an X.509 certificate?

Answer 7

Anyone

Question 8

Who can create an X.509 certificate?

Answer 8

Anyone

Question 9

Who can sign a X.509 certificate?

Answer 9

Only the certificate authority

Question 10

How does Kerberos verify the identity of the workstation user?

Answer 10

The authentication server encrypts the ticket using a key derived from the user’s workstation password so only the corresponding user would be able to decrypt it

Question 11

Name 5 things that the client receives from the authentication server?

Answer 11

1. A timestamp
2. The identity of the client
3. A key for the client to use when communicating with the ticket-granting server
4. The identity of the ticket-granting server
5. A service-granting ticket

Question 12

What is the difference between connecting and binding to an endpoint?

Answer 12

Client sockets connect to an endpoint, server sockets bind to an endpoint

Question 13

Who provides the attributes of principles in FIM?

Answer 13

Principles and Administrators

Question 14

A PIV smart card has three types of memory, they are ___, ___, and ___

Answer 14

ROM
EEPROM
RAM

Question 15

What is the purpose of building SSL into modern web browsers and other everyday web applications?

Answer 15

Provide built-in security

Question 16

SSL is deployed above the ___ layer and below the ___ layer on the network stack

Answer 16

Transport
Application

Question 17

What are the SSH authentication methods?

Answer 17

Public key
Password
Host based