Public Key Infrastructure and Digital Signatures CEH Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A software vendor signs its downloadable updates with a digital signature. A user downloads an update and wants to verify that the file came from the vendor and was not altered in transit. Which verification process should the user perform?

   • ADecrypt the file with the vendor's public key and compare the result to the original file.
   • BCompare the file's size and timestamp with the vendor's website.
   • CEncrypt the file with the vendor's public key and send it back to the vendor.
   • DHash the file, decrypt the signature with the vendor's public key, and compare the hashes.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which security property is provided by a digital signature through the use of asymmetric cryptography?

   • AAvailability
   • BAnonymity
   • CConfidentiality
   • DNon-repudiation
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which PKI trust model allows multiple CAs to cross-certify each other, creating a web of trust?

   • AMesh model
   • BHierarchical model
   • CSingle CA model
   • DBridge model
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the first step in verifying a digital signature?

   • ADecrypting the message with the signer's private key
   • BComputing a hash of the received message
   • CSending the message back to the signer for confirmation
   • DEncrypting the signature with the signer's public key
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company's CA is going to be decommissioned. The security team must ensure that certificates issued by this CA remain usable for the remainder of their validity periods. Which action should the team take?

   • ARevoke all certificates issued by the CA before decommissioning.
   • BReissue all certificates from a new CA before decommissioning.
   • CCross-certify the CA with another CA before decommissioning.
   • DEnsure that the CA's root certificate remains in the trust stores of all clients.
   Reveal Solution Discussion Select an answer first