Security+ PKI Digital Signatures Certificates

1. Online Certificate Status Protocol (OCSP) is used to check certificate validity in real-time. True or false?

True

False

2. A self-signed certificate is one where the issuer and subject are the same entity. True or false?

True

False

3. Which cryptographic algorithm is commonly used to create digital signatures?

AES

RSA or ECDSA

MD5

Base64

Submit

5. Which of the following is NOT a common reason for certificate revocation?

Private key compromise

Certificate holder no longer exists

Certificate owner requests revocation

Certificate has reached its natural expiration date

6. What is the primary advantage of asymmetric cryptography over symmetric cryptography in PKI?

It is faster

It eliminates the need for secure key distribution

It uses shorter keys

It consumes less memory

Submit

8. Which of the following best describes the purpose of certificate pinning?

Prevent clients from accepting unauthorized certificates

Speed up certificate validation

Compress certificate data

Encrypt certificate contents

9. What does PKI stand for?

Private Key Infrastructure

Public Key Infrastructure

Protocol Key Interface

Primary Kernel Interface

Submit

11. What is the primary purpose of a digital signature in cryptography?

Encrypt data so only authorized parties can read it

Verify the authenticity and integrity of a message

Generate random encryption keys

Compress data for faster transmission

12. What is the purpose of a Certificate Signing Request (CSR)?

Revoke an expired certificate

Request a CA to sign and issue a digital certificate

Encrypt sensitive files

Verify user identity during login

13. Which of the following is a valid X.509 certificate component?

Subject Distinguished Name

Issuer Distinguished Name

Serial number

All of the above

14. In asymmetric cryptography, if data is encrypted with a public key, what must be used to decrypt it?

The same public key

The corresponding private key

A shared symmetric key

Any available key

15. A digital signature provides non-repudiation, which means the signer cannot deny they signed the message. True or false?

True

False

16. What is the primary function of a Certificate Revocation List (CRL)?

Generate new encryption keys

List certificates that have been revoked or are no longer valid

Encrypt data in transit

Authenticate user passwords

17. Which protocol relies on PKI and digital certificates for secure web communication?

HTTP

FTP

HTTPS/TLS

Telnet

18. What does a digital certificate typically contain?

Only the owner's private key

The subject's public key, identity information, and CA signature

Unencrypted passwords

Temporary session tokens

19. In PKI, what entity issues and manages digital certificates?

End user

Certificate Authority (CA)

Internet Service Provider

Network switch

20. Which key is used to verify a digital signature created by another party?

Private key

Symmetric key

Public key

Session key

Security+ PKI Digital Signatures and Certificates Quiz

1. Online Certificate Status Protocol (OCSP) is used to check certificate validity in real-time. True or false?

2.

What first name or nickname would you like us to use?

2. A self-signed certificate is one where the issuer and subject are the same entity. True or false?

3. Which cryptographic algorithm is commonly used to create digital signatures?

4. The process of verifying that a certificate was signed by a trusted CA is called _____ validation.

5. Which of the following is NOT a common reason for certificate revocation?

6. What is the primary advantage of asymmetric cryptography over symmetric cryptography in PKI?

7. A certificate that is signed by another CA rather than a root CA is called a _____ certificate.

8. Which of the following best describes the purpose of certificate pinning?

9. What does PKI stand for?

10. A _____ is a trusted CA whose certificate is pre-installed in browsers and operating systems.

11. What is the primary purpose of a digital signature in cryptography?

12. What is the purpose of a Certificate Signing Request (CSR)?

13. Which of the following is a valid X.509 certificate component?

14. In asymmetric cryptography, if data is encrypted with a public key, what must be used to decrypt it?

15. A digital signature provides non-repudiation, which means the signer cannot deny they signed the message. True or false?

16. What is the primary function of a Certificate Revocation List (CRL)?

17. Which protocol relies on PKI and digital certificates for secure web communication?

18. What does a digital certificate typically contain?

19. In PKI, what entity issues and manages digital certificates?

20. Which key is used to verify a digital signature created by another party?