A company is setting up a PKI to issue certificates to employees for email signing. Which components must be in place for the PKI to function correctly?

A certificate authority and a public key, but no private keys.

A hash function and a symmetric cipher.

A key server, a firewall, and a load balancer.

A certificate authority (CA), a registration authority (RA), and a certificate repository.

Which statement accurately describes symmetric encryption?

It does not require any key to encrypt data

It uses the same key for both encryption and decryption

It uses a different key for each block of data

It uses a public key to encrypt and a private key to decrypt

A security auditor needs to verify that a critical configuration file has not been altered since it was backed up. The auditor has the original SHA-256 hash of the file. Which command should the auditor use to check the current file's integrity?

gpg --verify current.conf.sig current.conf

openssl enc -d -aes-256-cbc -in current.conf -out current.conf.dec

diff original.conf current.conf

A company's web server certificate is about to expire. The certificate was issued by a public CA. The administrator needs to renew it without changing the private key. What should the administrator do?

Extend the validity of the existing certificate using `openssl x509 -days 3650` on the certificate file.

Reuse the old CSR without generating a new one.

Generate a new private key and a new CSR, then submit the CSR to the CA.

Generate a new CSR using the existing private key and submit it to the CA for renewal.

CompTIALinux+

Domain 3Objective 5

Cryptography XK0-006 Practice Questions (Page 7)

Part of the Security domain, which accounts for 18% of the XK0-006 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

18%of the exam

Questions 31–35

31application · medium
A company is setting up a PKI to issue certificates to employees for email signing. Which components must be in place for the PKI to function correctly?
Select an answer first
32foundation · easy
Which statement accurately describes symmetric encryption?
Select an answer first
33expert · medium
A security auditor needs to verify that a critical configuration file has not been altered since it was backed up. The auditor has the original SHA-256 hash of the file. Which command should the auditor use to check the current file's integrity?
Select an answer first
34foundation · easy
Which protocol uses SSL/TLS certificates to secure web traffic?
Select an answer first
35expert · hard
A company's web server certificate is about to expire. The certificate was issued by a public CA. The administrator needs to renew it without changing the private key. What should the administrator do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to XK0-006

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “XK0-006” is a trademark of its owner, used for identification only.