Security+ PKI Digital Signatures Certificates

1. In PKI, what entity issues and manages digital certificates?

End user

Certificate Authority (CA)

Internet Service Provider

Network switch

2. What does a digital certificate typically contain?

Only the owner's private key

The subject's public key, identity information, and CA signature

Unencrypted passwords

Temporary session tokens

3. What is the primary advantage of asymmetric cryptography over symmetric cryptography in PKI?

It is faster

It eliminates the need for secure key distribution

It uses shorter keys

It consumes less memory

4. What is the primary function of a Certificate Revocation List (CRL)?

Generate new encryption keys

List certificates that have been revoked or are no longer valid

Encrypt data in transit

Authenticate user passwords

5. A digital signature provides non-repudiation, which means the signer cannot deny they signed the message. True or false?

True

False

6. Online Certificate Status Protocol (OCSP) is used to check certificate validity in real-time. True or false?

True

False

7. What is the purpose of a Certificate Signing Request (CSR)?

Revoke an expired certificate

Request a CA to sign and issue a digital certificate

Encrypt sensitive files

Verify user identity during login

8. A self-signed certificate is one where the issuer and subject are the same entity. True or false?

True

False

9. What is the primary purpose of a digital signature in cryptography?

Encrypt data so only authorized parties can read it

Verify the authenticity and integrity of a message

Generate random encryption keys

Compress data for faster transmission

10. Which protocol relies on PKI and digital certificates for secure web communication?

HTTP

FTP

HTTPS/TLS

Telnet

11. Which key is used to verify a digital signature created by another party?

Private key

Symmetric key

Public key

Session key

12. In asymmetric cryptography, if data is encrypted with a public key, what must be used to decrypt it?

The same public key

The corresponding private key

A shared symmetric key

Any available key

13. What does PKI stand for?

Private Key Infrastructure

Public Key Infrastructure

Protocol Key Interface

Primary Kernel Interface

14. Which of the following best describes the purpose of certificate pinning?

Prevent clients from accepting unauthorized certificates

Speed up certificate validation

Compress certificate data

Encrypt certificate contents

15. Which cryptographic algorithm is commonly used to create digital signatures?

AES

RSA or ECDSA

MD5

Base64

16. Which of the following is a valid X.509 certificate component?

Subject Distinguished Name

Issuer Distinguished Name

Serial number

All of the above

Submit

18. Which of the following is NOT a common reason for certificate revocation?

Private key compromise

Certificate holder no longer exists

Certificate owner requests revocation

Certificate has reached its natural expiration date

Submit

Security+ PKI Digital Signatures and Certificates Quiz

1. In PKI, what entity issues and manages digital certificates?

2.

What first name or nickname would you like us to use?

2. What does a digital certificate typically contain?

3. What is the primary advantage of asymmetric cryptography over symmetric cryptography in PKI?

4. What is the primary function of a Certificate Revocation List (CRL)?

5. A digital signature provides non-repudiation, which means the signer cannot deny they signed the message. True or false?

6. Online Certificate Status Protocol (OCSP) is used to check certificate validity in real-time. True or false?

7. What is the purpose of a Certificate Signing Request (CSR)?

8. A self-signed certificate is one where the issuer and subject are the same entity. True or false?

9. What is the primary purpose of a digital signature in cryptography?

10. Which protocol relies on PKI and digital certificates for secure web communication?

11. Which key is used to verify a digital signature created by another party?

12. In asymmetric cryptography, if data is encrypted with a public key, what must be used to decrypt it?

13. What does PKI stand for?

14. Which of the following best describes the purpose of certificate pinning?

15. Which cryptographic algorithm is commonly used to create digital signatures?

16. Which of the following is a valid X.509 certificate component?

17. A certificate that is signed by another CA rather than a root CA is called a _____ certificate.

18. Which of the following is NOT a common reason for certificate revocation?

19. A _____ is a trusted CA whose certificate is pre-installed in browsers and operating systems.

20. The process of verifying that a certificate was signed by a trusted CA is called _____ validation.