Understanding Public Key Infrastructure

Front

Which of the following best describes the purpose of Public Key Infrastructure (PKI)?
Options:
To encrypt files using symmetric encryption algorithms
To ensure the secure distribution and management of digital certificates
To store cryptographic keys securely for disaster recovery
To generate secure passwords for users

Back

To ensure the secure distribution and management of digital certificates

Front

What is the primary purpose of a public key in asymmetric encryption?

Back

To encrypt messages that can only be decrypted by the matching private key

Front

Which statement about private keys is correct? Options: Private keys are distributed publicly to ensure secure communication. Private keys must remain confidential and are used to decrypt data encrypted with the corresponding public key. Private keys are interchangeable with public keys in asymmetric encryption. Private keys are used to generate hash values for data integrity checks.

Back

Private keys must remain confidential and are used to decrypt data encrypted with the corresponding public key.

Front

What is the purpose of key escrow in a PKI system?

Back

To back up and securely store private keys in case they are lost or stolen

Front

Which of the following information is typically included in a digital certificate?
Options:
The private key of the user,
The public key of the user and the identity of the certificate holder,
A one-time password (OTP) for secure logins,
A list of approved devices for accessing encrypted data

Back

The public key of the user and the identity of the certificate holder

Front

What role does a Certificate Authority (CA) play in a PKI system?

Back

It verifies the identity of entities and signs their digital certificates.

Front

Which entity is responsible for validating the authenticity of certificates in secure email communication for employees?

Back

Certificate Authority (CA)

Front

A company needs a secure way to ensure encrypted data can still be decrypted in the future if an employee loses their private key. Which solution should the company implement?

Back

Key escrow

Front

A user receives a warning that a website's certificate is not trusted. What is the most likely cause of this warning? Options: The certificate has been revoked by the Certificate Authority., The private key of the website has been exposed., The certificate was issued by an untrusted Certificate Authority., The certificate includes an incorrect public key.

Back

The certificate was issued by an untrusted Certificate Authority.

Front

A system administrator wants to verify the integrity and authenticity of a signed document received from a business partner. Which of the following should the administrator use? The partner's public key, The administrator's private key, A certificate revocation list (CRL), A symmetric encryption algorithm

Back

The partner's public key