A user wants to send an encrypted email to a colleague. The user has the colleague's public key, but the key is not signed by anyone the user trusts. What should the user do to send the encrypted email?

Sign the colleague's public key with the user's own key to establish trust.

Ask the colleague to send their private key so the user can verify it.

Use S/MIME instead because it does not require key verification.

Encrypt the email using the colleague's public key without verifying the key's authenticity.

What trust model does OpenPGP (and GnuPG) use to validate public keys?

Hierarchical certificate authority

An employee's private key used for S/MIME email encryption is suspected to be compromised. What is the first step the employee should take?

Change the passphrase on the private key.

Generate a new key pair and use it immediately.

Revoke the certificate with the certificate authority.

Delete the private key from the system.

A user wants to send an encrypted email to a new contact using GnuPG. The user has the contact's public key but has never met the contact in person. What is the most secure way to verify the key's authenticity?

Verify the key's fingerprint through a separate communication channel.

Encrypt the email and hope the contact can decrypt it.

Trust the key because it was downloaded from a public key server.

Ask the contact to send their private key for verification.

LPI Security Essentials

Domain 2Objective 3

022.3 Email Encryption (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 2)

Part of the 022 Encryption domain, which makes up ~20% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

5concepts

Questions 6–10

6application · medium
A user wants to send an encrypted email to a colleague. The user has the colleague's public key, but the key is not signed by anyone the user trusts. What should the user do to send the encrypted email?
Select an answer first
7foundation · easy
What type of certificate does S/MIME use to bind a public key to an email user's identity?
Select an answer first
8foundation · easy
What trust model does OpenPGP (and GnuPG) use to validate public keys?
Select an answer first
9application · medium
An employee's private key used for S/MIME email encryption is suspected to be compromised. What is the first step the employee should take?
Select an answer first
10application · medium
A user wants to send an encrypted email to a new contact using GnuPG. The user has the contact's public key but has never met the contact in person. What is the most secure way to verify the key's authenticity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.