022.3 Email Encryption (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In S/MIME, what is the role of a certificate authority (CA)?

   • ATo issue and digitally sign X.509 certificates that verify a user's identity
   • BTo generate the private keys for all email users
   • CTo store a copy of every encrypted email for law enforcement
   • DTo encrypt all email messages on behalf of the sender
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   An organization is choosing between S/MIME and OpenPGP for email encryption. They require that all employees can automatically verify the authenticity of emails from any other employee without manual key management. Which solution should they choose?

   • AOpenPGP with a corporate key server.
   • BOpenPGP with a web of trust.
   • CS/MIME with an internal CA.
   • DS/MIME with self-signed certificates.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A user's S/MIME certificate is about to expire. What should the user do to continue using email encryption without interruption?

   • AUse the same certificate after expiration; it will still work.
   • BShare the private key with a colleague to continue using encryption.
   • CWait until the certificate expires and then generate a new one.
   • DRenew the certificate with the CA before it expires.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a key difference between S/MIME and OpenPGP in terms of trust model?

   • AS/MIME requires a pre-shared key, while OpenPGP uses certificates
   • BS/MIME uses symmetric encryption, while OpenPGP uses asymmetric encryption
   • CS/MIME is only for signing, while OpenPGP is only for encryption
   • DS/MIME uses a hierarchical CA model, while OpenPGP uses a web of trust
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A user wants to send an encrypted email to a colleague using GnuPG. The user has the colleague's public key, but the key is not signed by anyone the user trusts. What should the user do to send the encrypted email?

   • AEncrypt the email using the colleague's public key without verifying the key's authenticity.
   • BAsk the colleague to send their private key so the user can verify it.
   • CSign the colleague's public key with the user's own key to establish trust.
   • DUse S/MIME instead because it does not require key verification.
   Reveal Solution Discussion Select an answer first