7.3 Identify and Describe Public Key Infrastructure (PKI) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   When using asymmetric encryption, which key is used to encrypt data that only the intended recipient can decrypt?

   • AThe sender's public key
   • BThe recipient's private key
   • CThe recipient's public key
   • DThe sender's private key
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A software vendor wants to distribute a signed update. They have a certificate issued by a well-known CA. What does the vendor need to include with the update so that users can verify the signature and trust the certificate?

   • AThe vendor's certificate and any intermediate CA certificates.
   • BThe vendor's private key.
   • CThe root CA's private key.
   • DThe vendor's public key only.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst is troubleshooting why a client cannot validate a server certificate. The client trusts the root CA, but the server only sends its own certificate, not the intermediate CA certificate. What is the most likely reason the validation fails?

   • AThe server certificate has expired.
   • BThe client does not trust the server's public key.
   • CThe client cannot build the chain from the server certificate to the trusted root.
   • DThe root CA has been revoked.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In a chain of trust, what is the role of the root certificate authority (CA)?

   • AIt is the CA that issues certificates directly to end users only
   • BIt is the CA that verifies user passwords before issuing certificates
   • CIt is the top-level CA whose certificate is self-signed and anchors trust for all certificates below it
   • DIt is the certificate that belongs to the end user's device
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A software developer wants to sign a software update so that users can verify it was not tampered with and that it came from the developer. Which key should the developer use to create the digital signature?

   • AThe users' public key
   • BThe developer's private key
   • CA symmetric key shared with users
   • DThe developer's public key
   Reveal Solution Discussion Select an answer first