A large organization wants to issue smart-card certificates to 5,000 employees. The PKI team is small, and the CA must remain offline for security. Which component should be deployed to handle employee identity verification and certificate request approval?

A Registration Authority (RA) that verifies employees and approves requests before forwarding them to the offline CA

A public web server that employees use to generate their own self-signed certificates

A certificate template that automatically issues certificates without any verification

A second online CA that issues certificates directly to employees

What is the primary purpose of a Public Key Infrastructure (PKI)?

To encrypt all data at rest in a storage system

To manage and distribute public keys and digital certificates to enable secure communications

To provide a backup and recovery solution for lost data

To replace firewalls and intrusion detection systems

A healthcare organization needs to issue certificates to 10,000 employees for email signing and encryption. The PKI team must ensure that only verified employees receive certificates, but the CA must remain offline for security. The organization also wants to minimize the administrative burden. Which design is most appropriate?

Have employees generate self-signed certificates and upload them to a directory

Deploy an online RA that integrates with the HR system to verify employees and automatically approve requests, with the offline CA issuing certificates

Use a public CA to issue all employee certificates

Make the CA online and have it verify each request manually

A security analyst is examining an X.509 certificate and wants to verify that the certificate has not been tampered with. Which field in the certificate should the analyst verify?

The digital signature of the issuing CA

EC-CouncilNetwork Defense Essentials

Domain 6Objective 2

Public Key Infrastructure (PKI) and Digital Certificates NDE Practice Questions (Page 2)

Part of the Cryptography, PKI, and Data Security domain, which makes up ~15% of our current practice bank.

44questions here

9free pages

10concepts

Questions 6–10

6application · medium
A large organization wants to issue smart-card certificates to 5,000 employees. The PKI team is small, and the CA must remain offline for security. Which component should be deployed to handle employee identity verification and certificate request approval?
Select an answer first
7application · medium
A security administrator needs to configure an email client to send digitally signed and encrypted emails within the organization. Which PKI standard should the administrator use to ensure interoperability with most email clients?
Select an answer first
8foundation · easy
What is the primary purpose of a Public Key Infrastructure (PKI)?
Select an answer first
9expert · hard
A healthcare organization needs to issue certificates to 10,000 employees for email signing and encryption. The PKI team must ensure that only verified employees receive certificates, but the CA must remain offline for security. The organization also wants to minimize the administrative burden. Which design is most appropriate?
Select an answer first
10application · medium
A security analyst is examining an X.509 certificate and wants to verify that the certificate has not been tampered with. Which field in the certificate should the analyst verify?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Public Key Infrastructure (PKI) and Digital Certificates NDE Practice Questions (Page 2)

Questions 6–10

A large organization wants to issue smart-card certificates to 5,000 employees. The PKI team is small, and the CA must remain offline for security. Which component should be deployed to handle employee identity verification and certificate request approval?

A security administrator needs to configure an email client to send digitally signed and encrypted emails within the organization. Which PKI standard should the administrator use to ensure interoperability with most email clients?

What is the primary purpose of a Public Key Infrastructure (PKI)?

A security analyst is examining an X.509 certificate and wants to verify that the certificate has not been tampered with. Which field in the certificate should the analyst verify?

Keep studying — Cryptography, PKI, and Data Security