IS 577 - Chapter 12

A(n) _____ is a published set of rules that govern the operation of a PKI. A. certificate policy (CP) B. certificate practice statement (CPS) C. signature resource guide (SRG) D. enforcement certificate (EF)

a

Digital certificates can be used for each of the following except ________. A. to verify the authenticity of the Registration Authorizer B. to verify the identity of clients and servers on the Web C. to encrypt messages for secure e-mail communications D. to encrypt channels to provide secure communication between clients and servers

a

Dual sided digital certificates ________. A. are used in military and financial settings when it is necessary for the client to authenticate back to the server. B. are the same as dual key digital certificates. C. are required under PKCS #1 D. require a special browser

a

Which of the following is not part of the certificate life cycle? A. Authorization B. Creation C. Expiration D. Revocation

a

The ______ party trust model supports CA. A. first B. second C. third D. fourth

c

What is the cryptographic transport protocol that is used most often to secure Web transactions? A. SHTTP B. PPPTPoE C. HTTPS D. MD-17

c

A centralized directory of digital certificates is called a(n) ________. A. Digital Signature Approval List (DSAP) B. Digital Signature Permitted Authorization (DSPA) C. Authorized Digital Signature (ADS) D. Certificate Repository (CR)

d

An entity that issues digital certificates is a(n) ________. A. Certificate Signatory (CS) B. Signature Authority (SA) C. Digital Signer (DS) D. Certificate Authority (CA)

d

Public key infrastructure (PKI) ________. A. creates private key cryptography B. requires the use of an RA instead of a CA C. generates public/private keys automatically D. is the management of digital certificates

d

Public-Key Cryptography Standards (PKCS) ________. A. are used to create public keys only B. define how hashing algorithms are created C. have been replaced by PKI D. are widely accepted in the industry

d

The strongest technology that would assure Alice that Bob is the sender of a message is a(n) ________. A. digital signature B. encrypted signature C. hash D. digital certificate

d

_____ refers to a situation in which keys are managed by a third party, such as a trusted CA. A. Remote key administration B. Trusted key authority C. Key authorization D. Key escrow

d

Which of the following is not where keys can be stored? A. in hashes B. on the user's local system C. embedded in digital certificates D. in tokens

a

Which transport encryption algorithm is integrated as part of IPv6? A. IPsec B. SSH C. SSL/TLS D. RSA

a

_____ is a protocol for securely accessing a remote computer. A. Secure Shell (SSH) B. Secure Sockets Layer (SSL) C. Secure Hypertext Transport Protocol (SHTTP) D. Transport Layer Security (TLS)

a

A digital certificate associates ________. A. a private key with a digital signature B. the user's identity with their public key C. a user's private key with the public key D. a user's public key with their private key

b

Each of the following is a field of an X.509 certificate except ________. A. validity period B. CA expiration code C. serial number D. signature

b

Each of the following is true regarding hierarchical trust models except ________. A. It assigns a signal hierarchy with one master CA B. It is designed for use on a large scale C. The master CA is called the root D. The root signs all digital certificate authorities with a single key

b

In order to ensure a secure cryptographic connection between a Web browser and a Web server, a(n) _____ digital certificate would be used. A. e-mail Web certificate B. server digital certificate C. personal digital certificate D. Web digital certificate

b

A digital certificate that turns the address bar green is a(n) ________. A. X.509 Certificate B. Advanced Web Server Certificate (AWSC) C. Extended Validation SSL Certificate D. Personal Web-Client Certificate

c