What is the purpose of a certificate revocation list (CRL)?

To provide a backup of all digital certificates

To list all certificates issued by a CA

To list certificates that have been compromised or are no longer valid

To store private keys for certificate holders

What is the role of a key distribution center (KDC) in symmetric key management?

It encrypts all data transmitted between two parties.

It verifies digital signatures on behalf of users.

It generates and distributes session keys to parties that need to communicate securely.

It stores public keys for all users in the organization.

A company is implementing a document signing system. They need to ensure that a signed contract cannot be repudiated by the signer, and that the document's integrity is verifiable by any third party without contacting the company. Which approach best meets these requirements?

Use a hash of the document and publish it on a public blockchain.

Use a symmetric key to encrypt the document and share the key with the third party.

Use the signer's private key to sign a hash of the document, and make the signer's public key certificate available.

Use a trusted timestamp from a third-party service and encrypt the document with the signer's public key.

GIAC Security Essentials

Domain 3Objective 2

Cryptography Application GSEC Practice Questions (Page 7)

Part of the Cryptography and Communications domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

8concepts

Questions 31–35

31foundation · easy
What is the purpose of a certificate revocation list (CRL)?
Select an answer first
32foundation · easy
In asymmetric cryptography, which key is used to encrypt a message that only the intended recipient can decrypt?
Select an answer first
33foundation · easy
What is the role of a key distribution center (KDC) in symmetric key management?
Select an answer first
34expert · hard
A company is implementing a document signing system. They need to ensure that a signed contract cannot be repudiated by the signer, and that the document's integrity is verifiable by any third party without contacting the company. Which approach best meets these requirements?
Select an answer first
35foundation · easy
Which property of digital signatures prevents the signer from denying they signed a document?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Cryptography Application GSEC Practice Questions (Page 7)

Questions 31–35

What is the purpose of a certificate revocation list (CRL)?

In asymmetric cryptography, which key is used to encrypt a message that only the intended recipient can decrypt?

What is the role of a key distribution center (KDC) in symmetric key management?

A company is implementing a document signing system. They need to ensure that a signed contract cannot be repudiated by the signer, and that the document's integrity is verifiable by any third party without contacting the company. Which approach best meets these requirements?

Which property of digital signatures prevents the signer from denying they signed a document?

Keep studying — Cryptography and Communications