7.3 Identify and Describe Public Key Infrastructure (PKI) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 5)

Questions 21–24

1. 21expert · hard

   A company is migrating to a new root CA. They have an existing intermediate CA that was signed by the old root. They want to minimize downtime and ensure that existing certificates remain valid during the migration. What is the best approach?

   • AKeep the old root and intermediate in place until all certificates expire.
   • BUse the old intermediate to sign a new root.
   • CRevoke the old root immediately and issue new certificates.
   • DIssue a new intermediate CA signed by the new root and gradually re-issue certificates.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which action is a typical responsibility of a certificate authority (CA) during the certificate lifecycle?

   • ARevoking a certificate that is no longer trusted
   • BBlocking malicious websites
   • CDecrypting data for law enforcement
   • DStoring users' passwords in a secure vault
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the purpose of using the recipient's public key to encrypt data?

   • ATo allow the sender to decrypt the data later
   • BTo prove the sender's identity to the recipient
   • CTo ensure only the recipient's private key can decrypt the data
   • DTo speed up the encryption process
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary role of a certificate authority (CA) in a public key infrastructure?

   • ATo generate and store the private keys for all users in the organization
   • BTo issue and manage digital certificates that bind public keys to identities
   • CTo authenticate users by verifying their passwords
   • DTo encrypt all network traffic between clients and servers
   Reveal Solution Discussion Select an answer first