Quiz
Ch 4 - Advanced Cryptography
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (41)
1A certificate repository (CR) is a publicly accessible centralized directory of digital certificates
- ATrue
- BFalse
2A digital certificate is a technology used to associate a user's identity to a private key.
- ATrue
- BFalse
3A document that describes in detail how a CA uses and manages certificates, as well as how end users register for a digital certificate, is known as?
- ACertificate Practice Statement (CPS)
- BAccess Policy (AP)
- CLifecycle Policy (LP)
- DCertificate Policy (CP)
4A framework for all of the entities involved in digital certificates for digital certificate management is known as:
- Aprivate key infrastructure
- Bnetwork key infrastructure
- Cpublic key infrastructure
- Dshared key infrastructure
5A Subject Alternative Name (SAN) digital certificate, is also known as a Unified Communications Certificate (UCC).
- ATrue
- BFalse
6At what stage can a certificate no longer be used for any type of authentication?
- Aexpiration
- Bcreation
- Csuspension
- Drevocation
7A user electronically signs a Certificate Signing Request (CSR) by affixing their public key and then sending it to an intermediate certificate authority.
- ATrue
- BFalse
8Digital certificates should last forever.
- ATrue
- BFalse
9Root digital certificates should never be self-signed.
- ATrue
- BFalse
10Select the secure alternative to the telnet protocol:
- AHTTPS
- BIPsec
- CTLS
- DSSH
11Select the term that is used to describe a trusted third-party agency that is responsible for issuing digital certificates:
- ARegistration Authority
- BParticipation Authority
- CCertification Authority
- DDelegation Authority
12Some CAs issue only entry-level certificates that provide domain-only validation.
- ATrue
- BFalse
13Some cryptographic algorithms require that in addition to a key another value can or must be input.
- ATrue
- BFalse
14SSL v3.0 served as the basis for TLS v1.0.
- ATrue
- BFalse
15Stream ciphers work on multiple characters at a time.
- ATrue
- BFalse
16The Authentication Header (AH) protocol is a part of what encryption protocol suite below?
- AIPSec
- BSSL
- CTLS 3.0
- DGPG
17The process by which keys are managed by a third party, such as a trusted CA, is known as?
- Akey escrow
- Bkey renewal
- Ckey destruction
- Dkey management
18What allows an application to implement an encryption algorithm for execution?
- Acounters
- Binitialization vectors
- Ccrypto modules
- Dcrypto service providers
19What block cipher mode of operation encrypts plaintext and computes a message authentication code to ensure that the message was created by the sender and that it was not tampered with during transmission?
- ACounter
- BGalois/Counter
- CElectronic Code Book
- DCipher Block Chaining
20What block cipher mode of operation uses the most basic approach where the plaintext is divided into blocks, and each block is then encrypted separately?
- ACipher Block Chaining
- BCounter
- CElectronic Code Book
- DGalois/Counter
21What common method is used to ensure the security and integrity of a root CA?
- AKeep it in an offline state from the network
- BKeep it in an online state and encrypt it
- CPassword protect the root CA
- DOnly use the root CA infrequently
22What cryptographic transport algorithm is considered to be significantly more secure than SSL?
- AHTTPS
- BAES
- CTLS
- DESSL
23What is a value that can be used to ensure that plaintext, when hashed, will not consistently result in the same digest?
- Acounter
- Bnonce
- Cinitialization vector
- Dsalt
24What is used to create session keys?
- Amaster secret
- Bvalidation
- Ccrypto modules
- Ddomain validation
25What kind of digital certificate is typically used to ensure the authenticity of a web server to a client?
- Apublic web
- Bweb server
- Cweb client
- Dprivate
26What length SSL and TLS keys are generally considered to be strong?
- A128
- B1024
- C2048
- D4096
27What process links several certificates together to establish trust between all the certificates involved?
- Acertificate joining
- Bcertificate linking
- Ccertificate pairing
- Dcertificate chaining
28What process will remove all private and public keys along with the user's identification information in the CA?
- Adestruction
- Brevocation
- Cdeletion
- Dsuspension
29What protocol below supports two encryption modes: transport and tunnel?
- AHTTPS
- BSSL
- CTLS
- DIPSec
30What protocol, developed by Netscape in 1994, is designed to create an encrypted data path between a client and server that could be used on any platform or operating system?
- ASSL
- BEAP
- CTLS
- DPEAP
31SSL v3.0 is considered more secure than TLS v1.2
- ATrue
- BFalse
32What term best represents the resiliency of a cryptographic key to attacks?
- Akey bits
- Bkey resiliency
- Ckey strength
- Dkey space
33What type of trust model has a single CA that acts as a facilitator to interconnect all other CAs?
- Atransitive trust
- Bdistributed trust
- Cthird-party trust
- Dbridge trust
34What type of trust model is used as the basis for most digital certificates used on the Internet?
- Adistributed trust
- Brelated trust
- Cmanaged trust
- Dthird-party trust
35When two individuals trust each other because of the trust that exists between the individuals and a separate entity, what type of trust has been established?
- Athird-party
- Bdistributed
- Cweb of
- Dmutual
36Which of the following certificates are self-signed?
- Aroot digital certificates
- Btrusted digital certificates
- Cweb digital certificates
- Duser digital certificates
37Which of the following certificates verifies the identity of the entity that has control over the domain name?
- Avalidation digital certificate
- Broot digital certificates
- Cdomain validation digital certificate
- Dweb digital certificates
38Which of the following is an enhanced type of domain digital certificate?
- ATrusted Validation
- BExtended Validation
- CPrimary Validation
- DAuthorized Validation
39Which of the following is an input value that must be unique within some specified scope, such as for a given period or an entire session?
- Asalt
- Bcounter
- Cnonce
- Dinitialization vector
40Which of the following is a valid way to check the status of a certificate? (Choose all that apply.)
- AOnline Certificate Status Protocol
- BCertificate Revocation List
- CCertificate Revocation Authority
- DRevocation List Protocol
41Why is IPsec considered to be a transparent security protocol?
- AIPsec's design and packet header contents are open sourced technologies
- BIPsec uses the Transparent Encryption (TE) algorithm
- CIPsec is designed to not require modifications of programs, or additional training, or additional client setup
- DIPsec packets can be viewed by anyone
Information
- Description
- Ch 4 quiz
- Author
- C Danvers
- Language
- English
- Views
- 827
- Tags
- Rating
- No ratings yet Rate this quiz