SSL INTERNET SECURITY

A website has a digital certificate issued by a Certificate Authority (CA). The session key generated for the SSL session between a browser and the server hosting the website is encrypted using ___________ .

• A) The CA’s public key.

• B) The CA’s private key.

• C) The public key that comes with the digital

  certificate.

• D) The CA’s public key.

Which of the following is not contained in a digital certificate?

• A) Public key.

• B) Session key.

• C) Validity period.

• D) Hash algorithm.

In verifying that a digital certificate is from a Certificate Authority (CA), which of the following information is being compared?

• A) CA’s public key.

• B) CA’s private key.

• C) Message digest of the digital certificate.

• D) Public key on the digital certificate.

What does SSL stand for?

• Secure Socket Layer

• Special Security License

• Secure Space Layer

• Straight Socket Loop

In asymmetric encryption process. Each communicating party starts with how many keys?

• 5

• 4

• 3

• 2

Where are the public keys of communicating parties kept?

• Privately

• Exchanged prior to data exchanged

• Certificate authority

• In a written note that is send via email

If Bob wants to send a encrypted message to Alice, which key does he use?

• Bob private key

• Bob public key

• Alice public key

• Alice private key

If Bob receives Alice’s public key from a public directory, how does he know the key really came from Alice?

• From acknowledgement from Alice

• From a trusted certificate authority

• From your browser database

• From Alice server

A certificate authority (CA) is a trusted authority that certifies who is the owner of the public key (individual or organization) by issuing something called digital certificates.

• True

• False

•A certificate authority (CA) is a trusted authority that certifies who is the owner of the public key (individual or organization) by issuing something called digital certificates.

• False

• True