Public Key Infrastructure and Digital Signatures CEH Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which key is used to create a digital signature?

   • AThe signer's private key
   • BA symmetric session key
   • CThe recipient's private key
   • DThe signer's public key
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary advantage of using OCSP (Online Certificate Status Protocol) over a CRL for checking certificate revocation status?

   • AOCSP stores all certificates in a central database
   • BOCSP eliminates the need for certificate authorities
   • COCSP provides real-time status information with lower latency
   • DOCSP is more secure than CRL because it uses symmetric encryption
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A certificate administrator needs to temporarily disable a certificate for an employee who is on leave, but the certificate should be re-enabled when the employee returns. Which action should the administrator take?

   • ADelete the certificate from the CA database and reissue it later.
   • BRevoke the certificate permanently, then issue a new one when the employee returns.
   • CSuspend the certificate, which temporarily invalidates it without permanent revocation.
   • DChange the certificate's validity period to expire during the leave.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security engineer is designing a digital signature system for a large number of documents. The engineer wants to minimize the computational overhead of signing while maintaining security. Which approach should the engineer use?

   • AHash the document with a cryptographic hash function, then sign the hash with the private key.
   • BEncrypt the entire document with the private key to create the signature.
   • CSign the document's metadata, such as filename and timestamp, instead of the content.
   • DUse a symmetric key to encrypt the document and attach the key to the signature.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following is a common use of PKI in securing communications?

   • AGenerating random passwords for users
   • BCompressing data to reduce bandwidth
   • CAuthenticating a web server using an SSL/TLS certificate
   • DStoring encrypted backups of user data
   Reveal Solution Discussion Select an answer first