2.10 Describe the Impact of Certificates on Security (includes PKI, Public/private Crossing the Network, Asymmetric/symmetric) 200-201 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How does a digital certificate contribute to the confidentiality of communications?

   • AIt hashes the data to prevent tampering
   • BIt encrypts the data using the certificate's private key
   • CIt provides the public key used to encrypt a session key
   • DIt digitally signs the data to prove its origin
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security analyst is reviewing the certificate management process and finds that several servers are using certificates that have expired. The analyst also notices that the organization does not have a centralized system for tracking certificate expiration. What is the most likely security impact of this situation?

   • AExpired certificates automatically revoke the associated private keys
   • BExpired certificates increase encryption strength because they are older
   • CExpired certificates cause services to fail, leading to availability issues and potential security bypasses if users ignore warnings
   • DExpired certificates have no security impact if the private key is strong
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security analyst is troubleshooting a TLS handshake failure between a client and an internal server. The server certificate is valid, not expired, and chains to an internal root CA that is installed in the client's trust store. However, the handshake fails with an 'unknown CA' error. The analyst checks the server's certificate chain and finds that the server is only sending its leaf certificate, not the intermediate CA certificate. What is the most likely cause and the best fix?

   • AThe intermediate CA certificate is not installed on the server, so the server should be configured to send the full chain including the intermediate certificate
   • BThe server's certificate has expired, so it should be renewed
   • CThe root CA certificate is not installed on the client, so the client should import the root CA certificate
   • DThe client's clock is incorrect, so it should be synchronized with NTP
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a primary security risk of failing to revoke a compromised certificate?

   • AAttackers can decrypt past traffic that was encrypted with the certificate's public key
   • BAttackers can impersonate the legitimate entity and intercept or decrypt current communications
   • CThe certificate repository will become overloaded with invalid certificates
   • DThe certificate will automatically renew with a weaker key
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   During which stage of a certificate's lifecycle does the certificate holder request a new certificate before the current one expires?

   • ARevocation
   • BRenewal
   • CIssuance
   • DValidation
   Reveal Solution Discussion Select an answer first