Which of the following is a hardware-based solution for protecting private keys?

A passphrase-protected key file

An encrypted backup on a network share

A hardware security module (HSM)

What is the typical sequence of stages in the lifecycle of an X.509 certificate?

Issuance, creation, expiration, renewal, validity

Renewal, creation, issuance, validity, expiration

Validity, creation, issuance, renewal, expiration

Creation, issuance, validity, expiration, renewal

What is the primary purpose of renewing a certificate before it expires?

To extend the certificate's validity period without interruption

What is the primary purpose of protecting a private key with a passphrase?

To allow the key to be shared with other users

To speed up cryptographic operations

To prevent unauthorized use of the private key if the file is stolen

LPIC-3 Security

Domain 1Objective 1

325.1 X.509 Certificates and Public Key Infrastructures (weight: 5) LPIC-3-SECURITY Practice Questions (Page 2)

Part of the Topic 325: Cryptography domain, which makes up ~28% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

12concepts

Questions 6–10

6foundation · easy
Which of the following is a hardware-based solution for protecting private keys?
Select an answer first
7foundation · easy
What is the typical sequence of stages in the lifecycle of an X.509 certificate?
Select an answer first
8foundation · easy
What is the primary purpose of renewing a certificate before it expires?
Select an answer first
9foundation · easy
What is the primary purpose of protecting a private key with a passphrase?
Select an answer first
10foundation · easy
Which field in an X.509 certificate identifies the entity that issued the certificate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.