Public Key Infrastructure (PKI) and Digital Certificates NDE Practice Questions (Page 9)

Questions 41–44

1. 41application · easy

   A system administrator is examining a digital certificate and wants to verify the certificate's validity period and the identity of the certificate holder. Which fields in the X.509 certificate should the administrator review?

   • AThe issuer field and the public key
   • BThe extensions and the CRL distribution points
   • CThe validity period and the subject field
   • DThe signature algorithm and the serial number
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is the purpose of using a private key to create a digital signature?

   • ATo generate a shared secret key
   • BTo allow the recipient to decrypt the message
   • CTo encrypt the message so only the recipient can read it
   • DTo prove the authenticity and integrity of a message
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   Two companies are merging and need to establish trust between their existing PKIs so that employees from one company can validate certificates issued by the other company's CA. They want to avoid creating a new root CA and want to minimize administrative overhead. Which approach is the most efficient?

   • AEstablish cross-certification between the two root CAs
   • BBuild a new hierarchical PKI with a new root CA and migrate all certificates
   • CHave each company's CA issue certificates to the other company's users
   • DUse a web of trust where users manually validate each other's certificates
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A mid-sized company is deploying an internal PKI to issue employee smart-card certificates. The security team wants to reduce the load on the root CA and ensure that certificate requests are properly vetted before issuance. Which component should they deploy to handle identity verification and forward approved requests to the CA?

   • AA Registration Authority (RA) that validates employee identity and submits approved requests to the CA
   • BA subordinate CA that issues certificates directly to employees after self-verification
   • CA CRL distribution point that publishes approved requests for the CA to process
   • DAn OCSP responder that validates certificate requests in real time
   Reveal Solution Discussion Select an answer first