Cyber 3 Unit 7 Review

Certificate Repository (CR)

A centralized directory of digital certificates is called a(n) _____.

Certificate Relocation List (CRL)

Elton needs his application to perform a real-time lookup of a digital certificate's status. Which technology would he use?

ESP

How is confidentiality achieved through IPsec?

Domain Validation

Juan needs a certificate that must only authenticate that a specific organization has the right to use a particular domain name. What type of certificate does he need?

The user's identity with their public key

Olivia is explaining to a friend about digital certificates. Her friend asks what two entities a digital certificate associates or binds together. What would Olivia say?

Crypto Service Provider

What entity calls in crypto modules to perform cryptographic tasks?

.P7B

What is the file extension for a Cryptographic Message Syntax Standard based on PKCS#7 that defines a generic syntax for defining digital signature and encryption?

CN

What is the name of the device protected by a digital certificate?

Certificate Attributes

What is the name of the fields in an X.509 digital certificate that are used when the parties negotiate a secure connection?

To group and verify digital certificates

What is the purpose of certificate chaining?

Digital Certificate

What is the strongest technology that would assure Alice that Bob is the sender of a message?

CTR

Which block cipher mode of operating requires that both the message sender and receiver access a counter that computes a new value whenever a ciphertext block is exchanged?

Secure Shell (SSH)

Which is a protocol for securely accessing a remote computer in order to issue a command?

AH

Which is an IPsec protocol that authenticates that packets received were sent from the source?

The web browser sends a message ("ClientHello") to the server

Which is the first step in a key exchange?

To verify the authenticity of the CA

Which of the following can a digital certificate NOT be used for?

Web Browser Updates

Which of the following is NOT a means by which a newly approved root digital certificate is distributed?

Key Escrow

Which refers to a situation in which keys are managed by a third party, such as a trusted CA?

Certificate Authority

Who verifies the authenticity of a CSR?

Session Key

_____ are symmetric keys to encrypt and decrypt information exchanged during the session and to verify its integrity.