Ch 4 - Advanced Cryptography

1

A certificate repository (CR) is a publicly accessible centralized directory of digital certificates

1

A digital certificate is a technology used to associate a user's identity to a private key.

1

A document that describes in detail how a CA uses and manages certificates, as well as how end users register for a digital certificate, is known as?

1

A framework for all of the entities involved in digital certificates for digital certificate management is known as:

1

A Subject Alternative Name (SAN) digital certificate, is also known as a Unified Communications Certificate (UCC).

1

At what stage can a certificate no longer be used for any type of authentication?

1

A user electronically signs a Certificate Signing Request (CSR) by affixing their public key and then sending it to an intermediate certificate authority.

1

Digital certificates should last forever.

1

Root digital certificates should never be self-signed.

1

Select the secure alternative to the telnet protocol:

1

Select the term that is used to describe a trusted third-party agency that is responsible for issuing digital certificates:

1

Some CAs issue only entry-level certificates that provide domain-only validation.

1

Some cryptographic algorithms require that in addition to a key another value can or must be input.

1

SSL v3.0 served as the basis for TLS v1.0.

1

Stream ciphers work on multiple characters at a time.

1

The Authentication Header (AH) protocol is a part of what encryption protocol suite below?

1

The process by which keys are managed by a third party, such as a trusted CA, is known as?

1

What allows an application to implement an encryption algorithm for execution?

1

What block cipher mode of operation encrypts plaintext and computes a message authentication code to ensure that the message was created by the sender and that it was not tampered with during transmission?

1

What block cipher mode of operation uses the most basic approach where the plaintext is divided into blocks, and each block is then encrypted separately?

1

What common method is used to ensure the security and integrity of a root CA?

1

What cryptographic transport algorithm is considered to be significantly more secure than SSL?

1

What is a value that can be used to ensure that plaintext, when hashed, will not consistently result in the same digest?

1

What is used to create session keys?

1

What kind of digital certificate is typically used to ensure the authenticity of a web server to a client?

1

What length SSL and TLS keys are generally considered to be strong?

1

What process links several certificates together to establish trust between all the certificates involved?

1

What process will remove all private and public keys along with the user's identification information in the CA?

1

What protocol below supports two encryption modes: transport and tunnel?

1

What protocol, developed by Netscape in 1994, is designed to create an encrypted data path between a client and server that could be used on any platform or operating system?

1

SSL v3.0 is considered more secure than TLS v1.2

1

What term best represents the resiliency of a cryptographic key to attacks?

1

What type of trust model has a single CA that acts as a facilitator to interconnect all other CAs?

1

What type of trust model is used as the basis for most digital certificates used on the Internet?

1

When two individuals trust each other because of the trust that exists between the individuals and a separate entity, what type of trust has been established?

1

Which of the following certificates are self-signed?

1

Which of the following certificates verifies the identity of the entity that has control over the domain name?

1

Which of the following is an enhanced type of domain digital certificate?

1

Which of the following is an input value that must be unique within some specified scope, such as for a given period or an entire session?

1

Which of the following is a valid way to check the status of a certificate? (Choose all that apply.)

1

Why is IPsec considered to be a transparent security protocol?

Ch 4 quiz

Ch 4 - Advanced Cryptography

Ch 4 - Advanced Cryptography

A certificate repository (CR) is a publicly accessible centralized directory of digital certificates

A digital certificate is a technology used to associate a user's identity to a private key.

A document that describes in detail how a CA uses and manages certificates, as well as how end users register for a digital certificate, is known as?

A framework for all of the entities involved in digital certificates for digital certificate management is known as:

A Subject Alternative Name (SAN) digital certificate, is also known as a Unified Communications Certificate (UCC).

At what stage can a certificate no longer be used for any type of authentication?

A user electronically signs a Certificate Signing Request (CSR) by affixing their public key and then sending it to an intermediate certificate authority.

Digital certificates should last forever.

Root digital certificates should never be self-signed.

Select the secure alternative to the telnet protocol:

Select the term that is used to describe a trusted third-party agency that is responsible for issuing digital certificates:

Some CAs issue only entry-level certificates that provide domain-only validation.

Some cryptographic algorithms require that in addition to a key another value can or must be input.

SSL v3.0 served as the basis for TLS v1.0.

Stream ciphers work on multiple characters at a time.

The Authentication Header (AH) protocol is a part of what encryption protocol suite below?

The process by which keys are managed by a third party, such as a trusted CA, is known as?

What allows an application to implement an encryption algorithm for execution?

What block cipher mode of operation encrypts plaintext and computes a message authentication code to ensure that the message was created by the sender and that it was not tampered with during transmission?