What is the purpose of a certificate signing request (CSR)?

To encrypt data before transmission

To store the private key securely

To request that a CA issue a certificate for a public key

To revoke an existing certificate

A company's CA issues certificates to employees for email signing. An employee leaves the company, and their certificate must be invalidated immediately. Which mechanism should the CA use to ensure that other clients know the certificate is no longer valid?

Delete the certificate from the CA's database.

Reissue the certificate with a new serial number.

Publish a CRL containing the certificate's serial number.

Wait for the certificate to expire.

A company operates a public-facing PKI. The root CA is kept offline, and an intermediate CA issues certificates. The intermediate CA's private key is compromised. What is the most appropriate response?

Revoke the intermediate CA certificate and issue a new one from the root CA.

Continue using the intermediate CA until its certificate expires.

Reissue the intermediate CA certificate with the same key pair.

Revoke all end-entity certificates issued by the intermediate CA.

Which of the following is an important auditing practice for a certification authority?

Logging all certificate issuance and revocation events

Storing logs in a publicly accessible location

Disabling all logging to save disk space

LPIC-3 Security

Domain 1Objective 1

325.1 X.509 Certificates and Public Key Infrastructures (weight: 5) LPIC-3-SECURITY Practice Questions (Page 4)

Part of the Topic 325: Cryptography domain, which makes up ~28% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

12concepts

Questions 16–20

16foundation · easy
What is the purpose of a certificate signing request (CSR)?
Select an answer first
17application · medium
A company's CA issues certificates to employees for email signing. An employee leaves the company, and their certificate must be invalidated immediately. Which mechanism should the CA use to ensure that other clients know the certificate is no longer valid?
Select an answer first
18application · hard
A company operates a public-facing PKI. The root CA is kept offline, and an intermediate CA issues certificates. The intermediate CA's private key is compromised. What is the most appropriate response?
Select an answer first
19foundation · easy
Which X.509 certificate field contains the cryptographic key that is bound to the certificate's subject?
Select an answer first
20foundation · easy
Which of the following is an important auditing practice for a certification authority?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.