A company is implementing a PKI and needs to decide how to handle certificate revocation. The company has a small number of clients and wants to minimize the complexity of checking revocation status. Which method should the company choose?

Publish a Certificate Revocation List (CRL) and have clients download it periodically.

Do not implement revocation checking.

Use short-lived certificates that expire quickly.

Use Online Certificate Status Protocol (OCSP) with a responder.

A company wants to use a public CA to secure its public-facing website. What is the primary reason to choose a public CA over a private internal CA?

Public CAs are already trusted by web browsers and operating systems.

Public CAs provide stronger encryption than private CAs.

Public CAs do not require a certificate signing request.

What is the primary purpose of a digital signature?

To verify the authenticity and integrity of a message or file

To compress the data for transmission

To replace the need for encryption

To encrypt the entire message for confidentiality

What is the primary role of hashing algorithms in security?

To authenticate users with passwords stored in plaintext

To encrypt data for confidentiality

A company runs an internal web application that uses a self-signed certificate. The certificate is about to expire, and the administrator needs to replace it with a new certificate issued by the company's internal CA. Which steps should the administrator take?

Renew the existing self-signed certificate by extending its validity period with `openssl x509 -days 3650` on the current certificate.

Generate a new key pair and CSR, submit the CSR to the internal CA, then install the issued certificate on the server.

Use `openssl ca -gencrl` to generate a new certificate for the server.

Copy the existing certificate to a new file and change the server configuration to use the new file.

CompTIALinux+

Domain 3Objective 5

Cryptography XK0-006 Practice Questions (Page 4)

Part of the Security domain, which accounts for 18% of the XK0-006 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

18%of the exam

Questions 16–20

16expert · hard
A company is implementing a PKI and needs to decide how to handle certificate revocation. The company has a small number of clients and wants to minimize the complexity of checking revocation status. Which method should the company choose?
Select an answer first
17application · medium
A company wants to use a public CA to secure its public-facing website. What is the primary reason to choose a public CA over a private internal CA?
Select an answer first
18foundation · easy
What is the primary purpose of a digital signature?
Select an answer first
19foundation · easy
What is the primary role of hashing algorithms in security?
Select an answer first
20application · medium
A company runs an internal web application that uses a self-signed certificate. The certificate is about to expire, and the administrator needs to replace it with a new certificate issued by the company's internal CA. Which steps should the administrator take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XK0-006

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “XK0-006” is a trademark of its owner, used for identification only.