7.3 Identify and Describe Public Key Infrastructure (PKI) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company's root CA certificate is about to expire. They have many certificates issued by an intermediate CA that is signed by the root. What is the most critical action to take before the root CA expires?

   • AExtend the validity of all end-entity certificates.
   • BRenew the root CA certificate and re-issue the intermediate CA certificate.
   • CReplace the intermediate CA with a new one without renewing the root.
   • DRevoke all certificates issued by the intermediate CA.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A user's browser is trying to validate a website's certificate. The certificate was issued by an intermediate CA, which was issued by a root CA. The browser does not have the intermediate CA certificate in its trust store. What must happen for the browser to successfully validate the website's certificate?

   • AThe root CA must be replaced with the intermediate CA in the browser's trust store.
   • BThe website must provide the intermediate CA certificate along with its own certificate.
   • CThe browser must contact the intermediate CA to verify the certificate.
   • DThe website must use a certificate signed directly by the root CA.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What does verifying a digital signature with the sender's public key prove?

   • AThe message was not altered and was sent by the holder of the corresponding private key
   • BThe sender's private key is now public
   • CThe message is encrypted and cannot be read by others
   • DThe message was sent through a secure channel
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security administrator is explaining to a colleague how asymmetric encryption works. They want to send a confidential message to a colleague. Which key should they use to encrypt the message so that only the colleague can decrypt it?

   • AThe administrator's private key
   • BThe administrator's public key
   • CThe colleague's public key
   • DThe colleague's private key
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How is trust established from a root CA to an end-entity certificate?

   • ABy checking the end-entity certificate's expiration date only
   • BBy comparing the end-entity certificate's serial number with the root CA's serial number
   • CBy verifying each certificate in the chain up to the root CA, which is trusted by the system
   • DBy encrypting the end-entity certificate with the root CA's public key
   Reveal Solution Discussion Select an answer first