15.2.3 Public Key Infrastructure Practice Questions

Which of the following is an entity that accepts and validates information contained within a request for a certificate? - Validation authority - Certificate management system - Registration authority - Certificate authority

Registration authority

Which of the following best describes a certificate authority (CA)? - An electronic password that allows a person or organization to exchange data securely over the Internet - An entity in a PKI that verifies user requests for a digital certificate. - An entity that provides a service used to verify the validity of a digital certificate. - An entity that issues digital certificates.

- An entity that issues digital certificates.

Which of the following describes a PKI? - An algorithm for encrypting and decrypting data. - Software that manages an organization's certificates. - A security architecture that ensures data connections between entities are validated and secure. - A protocol that defines secure key exchange.

A security architecture that ensures data connections between entities are validated and secure.

Kathy doesn't want to purchase a digital certificate from a public certificate authority, but needs to establish a PKI in her local network. Which of the follow actions should she take? - Request a certificate from GoDaddy. - Create a local CA and generate a self-signed certificate. - Enable synchronous encryption in her network. - Ensure all HTTP traffic uses port 443.

Create a local CA and generate a self-signed certificate.

Robert, an IT administrator, is working for a newly formed company. He needs a digital certificate to send and receive data securely in a Public Key Infrastructure (PKI). Which of the following requests should he submit? - He must send identifying data with his certificate request to a registration authority (RA). - He must send identifying data and the encryption algorithm he will use with his certificate request to a certificate authority (CA). - He must send the MAC and IP addresses with his certificate to a root certificate authority (CA). - He must send identifying data and a private key request to a validation authority (VA).

He must send identifying data with his certificate request to a registration authority (RA).