Public Key Infrastructure (PKI) and Digital Certificates NDE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the correct order of stages in a typical certificate lifecycle?

   • AIssuance, renewal, expiration
   • BRenewal, issuance, expiration
   • CIssuance, expiration, renewal
   • DExpiration, issuance, renewal
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Why is it important to have a documented PKI security policy?

   • ATo encrypt all data stored in the organization
   • BTo define the procedures for certificate issuance, revocation, and key management
   • CTo replace the need for a Certificate Authority
   • DTo automatically renew all certificates
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   An organization is implementing a PKI and must comply with a regulation that requires the ability to prove that a certificate was valid at a specific time in the past. Which practice should they implement to meet this requirement?

   • AMaintain a secure audit log of all certificate issuance and revocation events with timestamps
   • BPublish CRLs frequently and retain old CRLs
   • CRely on OCSP responses and store them for each validation
   • DUse short-lived certificates to minimize the need for historical validation
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which PKCS standard defines the format for RSA public and private keys?

   • APKCS #7
   • BPKCS #1
   • CPKCS #12
   • DPKCS #10
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   In a hierarchical trust model, how is trust established between entities?

   • AThrough a single root CA that issues certificates to subordinate CAs
   • BThrough direct peer-to-peer trust relationships between users
   • CThrough a central authority that verifies all transactions
   • DThrough a distributed network of equal CAs
   Reveal Solution Discussion Select an answer first