Which component of a Public Key Infrastructure (PKI) is responsible for issuing and revoking digital certificates?

Certificate Revocation List (CRL)

A company's compliance team requires that encryption keys be rotated every 90 days. However, the operations team warns that frequent rotation of the master key used for database encryption causes downtime. Which solution BEST addresses both requirements?

Use envelope encryption: rotate the master key regularly and re-encrypt only the data encryption keys.

Use a single long-term key and document the risk.

Rotate the master key during off-peak hours only.

Extend the rotation period to 365 days to reduce downtime.

Which set of four core security services is cryptography designed to provide?

Availability, scalability, reliability, and recoverability

Encryption, decryption, hashing, and key exchange

Confidentiality, integrity, authentication, and non-repudiation

Secrecy, anonymity, privacy, and untraceability

A company needs to securely share a large file with a business partner. The file is too large for email, so they plan to use a file transfer service. They want to ensure confidentiality and integrity during transfer. Which approach is MOST secure?

Use the file transfer service's built-in encryption without additional measures.

Encrypt the file with a symmetric key, share the key via a separate secure channel, and transfer the encrypted file.

Send the file over HTTPS without additional encryption.

Compress the file and send it via the transfer service.

GIAC Information Security Fundamentals

Domain 4Objective 1

Foundations of Cryptography and Digital Trust GISF Practice Questions (Page 5)

Part of the Cryptography and Identity domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

7concepts

Questions 21–25

21foundation · easy
Which component of a Public Key Infrastructure (PKI) is responsible for issuing and revoking digital certificates?
Select an answer first
22expert · hard
A company's compliance team requires that encryption keys be rotated every 90 days. However, the operations team warns that frequent rotation of the master key used for database encryption causes downtime. Which solution BEST addresses both requirements?
Select an answer first
23foundation · easy
Which attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge?
Select an answer first
24foundation · easy
Which set of four core security services is cryptography designed to provide?
Select an answer first
25expert · hard
A company needs to securely share a large file with a business partner. The file is too large for email, so they plan to use a file transfer service. They want to ensure confidentiality and integrity during transfer. Which approach is MOST secure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.