Public Key Infrastructure and Digital Signatures CEH Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   How does PKI integrate with cryptographic techniques to secure communications?

   • ABy replacing all symmetric encryption with asymmetric encryption
   • BBy eliminating the need for hash functions
   • CBy storing all private keys in a central database
   • DBy using digital certificates to distribute and authenticate public keys
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security analyst is examining an X.509 certificate for a web server. The analyst needs to determine whether the certificate has been revoked. Which field or mechanism should the analyst check?

   • AThe certificate's Validity Period, which shows if it has expired.
   • BThe certificate's Serial Number field, which indicates if it is revoked.
   • CThe certificate's CRL Distribution Points extension, which provides the URL to the CRL or OCSP responder.
   • DThe certificate's Subject field, which lists the owner's name and revocation status.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is planning to deploy a PKI for internal use. They want to ensure that the root CA is highly secure and not exposed to daily operations. They also need to issue certificates for various departments. Which architecture best meets these requirements?

   • AA single online root CA that issues all certificates directly.
   • BAn offline root CA and one or more online subordinate CAs for certificate issuance.
   • CA mesh of online CAs with no offline root.
   • DA bridge CA that connects to public CAs for internal issuance.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In an X.509 digital certificate, which field identifies the entity that issued and signed the certificate?

   • AIssuer
   • BSerial Number
   • CValidity Period
   • DSubject
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A developer is implementing a digital signature verification function. The function receives a message and a signature. Which sequence of operations correctly verifies the signature?

   • AHash the message, encrypt the hash with the signer's public key, and compare to the signature.
   • BDecrypt the message with the signer's private key and compare to the signature.
   • CHash the signature and compare it to the message hash.
   • DDecrypt the signature with the signer's public key to obtain a hash, hash the message, and compare the two hashes.
   Reveal Solution Discussion Select an answer first