7.3 Identify and Describe Public Key Infrastructure (PKI) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In asymmetric cryptography, what is the relationship between a public key and a private key?

   • AThey are identical keys used for both encryption and decryption
   • BThey are mathematically related, but the private key cannot be derived from the public key
   • CThe private key is derived from the public key by reversing the algorithm
   • DThey are unrelated keys that are randomly generated independently
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How is a digital signature created?

   • ABy encrypting the message with the recipient's public key
   • BBy hashing the message with the recipient's private key
   • CBy encrypting a hash of the message with the sender's private key
   • DBy encrypting the entire message with the sender's public key
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A user receives an encrypted email from a colleague. The email was encrypted using the user's public key. What must the user do to read the email?

   • AUse the sender's private key to decrypt the email.
   • BUse their own private key to decrypt the email.
   • CUse a shared symmetric key to decrypt the email.
   • DUse the sender's public key to decrypt the email.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which statement correctly describes the distribution of keys in a public/private key pair?

   • ABoth keys are published in a public directory
   • BThe public key is shared openly, while the private key is kept secret by its owner
   • CThe private key is shared with the CA, while the public key is kept secret
   • DBoth keys are kept secret and shared only with trusted parties
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to issue digital certificates to its employees for internal application authentication. They plan to set up their own certificate authority (CA) to issue these certificates. Which component must they establish first to ensure that all issued certificates can be validated by clients?

   • AA root CA certificate
   • BA digital signature algorithm
   • CA certificate revocation list (CRL)
   • DA public key infrastructure (PKI) policy
   Reveal Solution Discussion Select an answer first