5.4 - Understand Public Key Infrastructure (PKI) SSCP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a limitation of using blockchain for PKI?

   • ABlockchain does not use cryptography
   • BBlockchain cannot store any data, only transactions
   • CBlockchain is only suitable for private networks
   • DThe immutability of records can make it difficult to revoke or update keys
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following factors is most directly related to the cryptographic strength of a key?

   • AThe name of the key file
   • BThe key length in bits
   • CThe color of the key icon in the management console
   • DThe location where the key is stored
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An organization is rotating its root CA key pair. The old root CA certificate is still trusted by many clients. What is the best practice to ensure a smooth transition?

   • AWait for the old root CA certificate to expire before introducing the new one
   • BImmediately revoke the old root CA certificate
   • CCross-sign the new root CA certificate with the old root CA
   • DKeep the old root CA key pair and use it for both old and new certificates
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security architect is selecting an asymmetric algorithm for a new system that will encrypt data at rest and in transit. The system must be resistant to quantum computing attacks. Which key composition should the architect choose?

   • AA symmetric algorithm like AES with a 256-bit key
   • BRSA with a 2048-bit key
   • CElliptic Curve Cryptography (ECC) with a 256-bit key
   • DA post-quantum algorithm such as lattice-based cryptography
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security team is deploying a new key management system. They need to generate a large number of keys for a high-throughput application. They are concerned about the entropy source. Which approach ensures the highest quality of key generation?

   • AUse a deterministic random bit generator (DRBG) seeded with a hardware entropy source
   • BUse a random number generator from the operating system's default library
   • CUse a pseudo-random number generator (PRNG) seeded with the current time
   • DUse a software-based random number generator without a seed
   Reveal Solution Discussion Select an answer first