Which protocol provides real-time, online checking of a certificate's revocation status?

Online Certificate Status Protocol (OCSP)

What is the primary purpose of key escrow?

To rotate keys on a regular schedule

To encrypt keys with a password for storage

To allow a trusted third party to hold a copy of a key for recovery or lawful access

To distribute public keys to all users

Two organizations need to establish a secure communication channel. They both have public keys that are signed by a mutually trusted CA. They want to use a key exchange that provides mutual authentication. Which approach should they use?

Use TLS with mutual authentication, where both parties present certificates signed by the CA

Use Diffie-Hellman key exchange with static public keys

Use a pre-shared key exchanged via email

Which of the following is a portable, tamper-resistant device that can securely store a user's private key and perform cryptographic operations without exposing the key to the host computer?

A network-attached storage (NAS) device

Which of the following is a hardware-based secure method for storing cryptographic keys that provides tamper resistance and is commonly used to protect the root keys of a certificate authority?

A plaintext file on an encrypted hard drive

A password-protected ZIP archive

A hardware security module (HSM)

Systems Security Certified Practitioner

Domain 5Objective 4

5.4 - Understand Public Key Infrastructure (PKI) SSCP Practice Questions (Page 3)

Part of the Cryptography domain, which accounts for 9% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

11concepts

9%of the exam

Questions 11–15

11foundation · easy
Which protocol provides real-time, online checking of a certificate's revocation status?
Select an answer first
12foundation · easy
What is the primary purpose of key escrow?
Select an answer first
13expert · hard
Two organizations need to establish a secure communication channel. They both have public keys that are signed by a mutually trusted CA. They want to use a key exchange that provides mutual authentication. Which approach should they use?
Select an answer first
14foundation · easy
Which of the following is a portable, tamper-resistant device that can securely store a user's private key and perform cryptographic operations without exposing the key to the host computer?
Select an answer first
15foundation · easy
Which of the following is a hardware-based secure method for storing cryptographic keys that provides tamper resistance and is commonly used to protect the root keys of a certificate authority?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.