Which of the following is a recommended method for securely destroying a cryptographic key stored in software?

Overwriting the key's storage location with random data

Compressing the file to save space

Deleting the file and emptying the recycle bin

Renaming the file to a different name

Two parties want to establish a shared secret over an insecure channel. They use Diffie-Hellman key exchange. What is the primary purpose of this exchange?

To establish a shared secret that can be used for symmetric encryption

To authenticate each party's identity

An organization's certificate authority has issued a certificate to an employee who has left the company. The security team needs to ensure that this certificate is no longer trusted by clients. Which action should be taken?

Wait for the certificate to expire naturally

Add the certificate to the certificate revocation list (CRL)

Delete the certificate from the CA's database

Rotate the certificate with a new key pair

How do PGP and GPG typically implement the Web of Trust for email encryption?

They rely on a central certificate authority to validate all keys

They use a shared secret password for all users

They automatically trust any key uploaded to a key server

Users sign each other's public keys to vouch for their authenticity

Systems Security Certified Practitioner

Domain 5Objective 4

5.4 - Understand Public Key Infrastructure (PKI) SSCP Practice Questions (Page 1)

Part of the Cryptography domain, which accounts for 9% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

11concepts

9%of the exam

Questions 1–5

1foundation · easy
Which of the following is a recommended method for securely destroying a cryptographic key stored in software?
Select an answer first
2application · medium
Two parties want to establish a shared secret over an insecure channel. They use Diffie-Hellman key exchange. What is the primary purpose of this exchange?
Select an answer first
3application · medium
An organization's certificate authority has issued a certificate to an employee who has left the company. The security team needs to ensure that this certificate is no longer trusted by clients. Which action should be taken?
Select an answer first
4foundation · easy
Which of the following tools is an open-source implementation of the OpenPGP standard that supports encryption and digital signatures?
Select an answer first
5foundation · easy
How do PGP and GPG typically implement the Web of Trust for email encryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.