Net security Chap 6

The vulnerability discovered in IPsec in early 2014 was nicknamed Heartbleed, due to an issue with a heartbeat extension in the protocol. 

• false
• true

At what stage can a certificate no longer be used for any type of authentication? 

• lost confidentiality
• expiration

What type of trust model has a single CA that acts as a facilitator to interconnect all other CAs? 

• bridge trust
• third party

Why is IPsec considered to be a transparent security protocol? ​ 

• IPsec is designed to require modifications of programs, or additional training, or additional client setup
• IPsec is designed to not require modifications of programs, or additional training, or additional client setup

Digital certificates cannot be used to identify objects other than users. 

• False
• True

What protocol below supports two encryption modes: transport and tunnel? 

• RSA
• GPG
• IPsec

What is the name for an organization that receives, authenticates, and processes certificate revocation requests? 

• Registration Authority
• distributed trust
• Certificate practice statement (CPS)

The Encapsulating Security Payload (ESP) protocol ensures IPsec's confidentiality. ​ 

• False
• True

What protocol, developed by Netscape in 1994, is designed to create an encrypted data path between a client and server that could be used on any platform or operating system? 

• IPSec
• SSH
• SSL
• telnet

A technology used to associate a user's identity to a public key, in which the user's public key is digitally signed by trusted third party. ​ 

• Digital certificate
• Certificate Repository (CR)
• Certificate Policy (CP)