2.10 Describe the Impact of Certificates on Security (includes PKI, Public/private Crossing the Network, Asymmetric/symmetric) 200-201 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security team is implementing a PKI for a government agency that requires high assurance for certificate issuance. The team must ensure that certificate requests are properly validated before issuance. Which PKI component should be responsible for this validation?

   • AThe registration authority (RA) validates the identity of the certificate requester.
   • BThe certificate revocation list (CRL) lists revoked certificates.
   • CThe certificate repository stores issued certificates.
   • DThe certificate authority (CA) validates the requester's identity.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A network analyst is capturing traffic on a corporate network and sees a TLS handshake. The analyst notices that the client and server are negotiating a session key using ephemeral Diffie-Hellman (DHE). The analyst also sees that the server's certificate is being used to sign the key exchange parameters. What is the primary security benefit of using ephemeral Diffie-Hellman in this scenario?

   • AIt eliminates the need for a certificate authority, because the ephemeral key is self-authenticating
   • BIt allows the use of symmetric encryption without exchanging any keys
   • CIt provides forward secrecy, so that if the server's private key is compromised in the future, past session keys cannot be recovered
   • DIt uses the server's certificate to encrypt the session key, ensuring confidentiality
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary role of a digital certificate in establishing trust when a client connects to a server over a network?

   • AIt stores the session keys used for the connection
   • BIt encrypts all data transmitted between client and server
   • CIt binds the server's public key to its identity
   • DIt provides the client's private key to the server
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which component of a PKI is responsible for digitally signing certificates to bind a public key to an entity's identity?

   • ACertificate Authority (CA)
   • BCertificate repository
   • CRegistration Authority (RA)
   • DKey escrow agent
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In a typical TLS handshake, what is the primary role of asymmetric encryption?

   • ATo authenticate the client using a shared secret
   • BTo compress the data before transmission
   • CTo securely exchange a symmetric session key
   • DTo encrypt the entire data stream of the session
   Reveal Solution Discussion Select an answer first