PKI Overview

1. 1Which server is the VACU Root Certificate Authority?

   1. AVM-CAR-1
   2. BVM-CAI-1
   3. CVM-CAI-2
   4. DWFS-CAR-1
   5. EVM-INF-03
2. 2What Version level of certificate is compatible with Windows 2008 Server / Windows Vista and above?

   1. ASHA1
   2. B2
   3. C3
   4. D4
   5. ESHA256
3. 3What is the definition of SAN with regards to certificates?

   1. ASubject Alternate Name
   2. BSubject Alternative Name
   3. CStorage Area Network
   4. DServer Alternative Name
   5. EStorage Array Network
4. 4How is the Root CA Server protected?

   1. AStored in a safe
   2. BBitLocker encrypted laptop
   3. CBitLocker encrypted Virtual Machine
   4. DDual Control access
   5. EAll answers are correct
5. 5How often is the Root CA CRL published?

   1. Adecennially
   2. Bannually
   3. Cquinquennially
   4. Ddaily
   5. Eweekly
6. 6How often is the Issuing CA CRL published?

   1. Aannually
   2. Bweekly
   3. Cdaily
   4. Ddecennially
   5. Equinquennially
7. 7How often is the Issuing CA Delta CRL published?

   1. Aannually
   2. Bweekly
   3. Cdecennially
   4. Ddaily
   5. Equinquennially
8. 8What is the validity period of the Root CA server certificate?

   1. A3 years
   2. B5 years
   3. C10 years
   4. D20 years
   5. E2 years
9. 9What attribute of a certificate template would allow a user or machine to obtain a certificate from the Issuing Certificate Authority without any interaction?

   1. ARead rights
   2. BAllow Rights
   3. CAutomatic rights
   4. DEnroll rights
   5. EAutoEnroll rights
10. 10What is stored in a Certificate Revocation List?

    1. Aa list of serial numbers for certificates that have been revoked, and therefore, entities presenting those (revoked) certificates should no longer be trusted
    2. Ba list of serial numbers for certificates that have been renewed, and therefore, entities presenting those (renewed) certificates should be trusted
    3. Ca list of certificate defaults - including subject, size, key length, and life cycle parameters - stored in Active Directoy
    4. Dthe location of the CA Distribution Points
    5. Ea list of valid Certificate Servers - including Root and Issuing servers

11. 11What signature algorithm are we using on all certificate templates?

    1. ASHA1
    2. BSHA224
    3. CSHA256
    4. DSHA2
    5. ESHA512
12. 12Who configures the certificate templates?

    1. Aconfiguration is not allowed
    2. BCA Administrator
    3. Cthe User requesting the certificate
    4. Dthe Machine requesting the certificate
    5. EExchange Administrator
13. 13What is the validity period of the Issuing CA server certificate?

    1. A1 year
    2. B2 years
    3. C5 years
    4. D10 years
    5. E20 years
14. 14Which of the following is a role of the Root CA server?

    1. Aprovide certificates to the Issuing CA server
    2. Bredundant CRL availability/publishing
    3. Cweb enrollment site hosting
    4. Dhandle Auto-Enrollment requests
    5. Eautomatic Delta CRL publishing
15. 15What is the URL of the new VACU Web Enrollment site?

    1. Ahttps://ca.vacu.main/certsrv
    2. Bhttps://ca.vacu.main/certsvr
    3. Chttps://pki.vacu.main/certsrv
    4. Dhttp://pki.vacu.main/certsrv
    5. Ehttps://pki.vacu.main/certsvr
16. 16What is required for a user to be able to enroll in or request a certificate from the Web Enrollment website?

    1. Auser must have permissions to Read and Enroll in the certificate
    2. Buser must be an Administrator of the local machine
    3. Cuser must be Auto-Enrolled in Active Directory
    4. Duser must run the Certificates MMC snap-in on the local machine
    5. Euser must connect to the CRL Distribution Point

Description

Quiz on PKI Overview, created by Chris Hemann on 12/06/2015.

Author

Chris Hemann

Language

English

Views

2

Rating

No ratings yet

Rate this quiz

Rate this quiz

More on Public Key Infrastructure and Digital Certificates