A development team uses a shared symmetric key to encrypt configuration files in a CI/CD pipeline. The security review recommends that the key be changed regularly and that old keys be retained for a limited period to allow decryption of historical backups. Which practice should the team implement?

Implement key rotation by generating a new key and re-encrypting current data, while securely archiving the old key for a defined retention period.

Encrypt the old key with the new key and store it in the same configuration file.

Use the same key indefinitely to avoid the complexity of managing multiple keys.

Delete the old key immediately after generating a new one to ensure no stale keys exist.

Which component of a PKI is responsible for verifying the identity of an entity before a certificate is issued?

Certificate Revocation List (CRL)

What is the purpose of the validity period in an X.509 certificate?

To store the certificate's public key

To identify the certificate's serial number

To indicate the certificate's revocation status

To specify the dates during which the certificate is considered valid

LPI Security Essentials

Domain 2Objective 1

022.1 Cryptography and Public Key Infrastructure (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 3)

Part of the 022 Encryption domain, which makes up ~20% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

10concepts

Questions 11–15

11foundation · easy
Which of the following is a symmetric encryption algorithm?
Select an answer first
12application · medium
A development team uses a shared symmetric key to encrypt configuration files in a CI/CD pipeline. The security review recommends that the key be changed regularly and that old keys be retained for a limited period to allow decryption of historical backups. Which practice should the team implement?
Select an answer first
13foundation · easy
Which component of a PKI is responsible for verifying the identity of an entity before a certificate is issued?
Select an answer first
14foundation · easy
What is the purpose of the validity period in an X.509 certificate?
Select an answer first
15foundation · easy
Which property of a hash function ensures that it is computationally infeasible to find two different inputs that produce the same hash?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

022.1 Cryptography and Public Key Infrastructure (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 3)

Questions 11–15

Which of the following is a symmetric encryption algorithm?

A development team uses a shared symmetric key to encrypt configuration files in a CI/CD pipeline. The security review recommends that the key be changed regularly and that old keys be retained for a limited period to allow decryption of historical backups. Which practice should the team implement?

Which component of a PKI is responsible for verifying the identity of an entity before a certificate is issued?

What is the purpose of the validity period in an X.509 certificate?

Which property of a hash function ensures that it is computationally infeasible to find two different inputs that produce the same hash?

Keep studying — 022 Encryption