CASP: Chapter 10B

What term describes the requirement for both client and server devices to use certificates to verify identity?

• Mutual Authentication

• Certificate Pinning

• Single Sign-On (SSO)

• Token-based Authentication

What is the name of the response header configured on a web server to notify a browser to connect to the requested website using HTTPS only?

• Secure Socket Layer (SSL) Certificate

• HTTPS Secure Header (HSH)

• Secure Connection Indicator (SCI)

• HTTP Strict Transport Security (HSTS)

When accessing a known website, the error message “your connection is not private” is displayed. What is a possible cause of this error?

• Weak Cipher Suite

• Expired Certificate

• Invalid HTTP Header

• Certificate Revocation

Which component of Public Key Infrastructure (PKI) is responsible for supporting the generation of digital certificates and public-key encryption capabilities?

• Software

• Hardware

• Services

• Cryptographic algorithms

How does Public Key Infrastructure (PKI) facilitate secure communication?

• By decrypting messages with public keys

• By encrypting messages with symmetric keys

• By encrypting messages with private keys

• By encrypting messages with public keys and decrypting them with private keys

What is the primary role of Certificate Authorities (CAs) in the context of identity verification and certificate issuance?

• Generating encryption keys

• Auditing network traffic

• Managing digital signatures

• Issuing and validating certificates

Which of the following functions is NOT typically performed by a Certificate Authority (CA)?

• Providing certificate services

• Validating applicant identity

• Managing network infrastructure

• Overseeing key and certificate life cycle management

What is the primary advantage of the hierarchical model in Public Key Infrastructure (PKI)?

• Centralized certificate issuance

• Improved scalability and flexibility

• Enhanced certificate encryption

• Simplified certificate management

How does the hierarchical model in Public Key Infrastructure (PKI) contribute to establishing trust in certificates?

• Through mutual authentication

• Through centralized key management

• By forming a chain of trust

• By encrypting certificate data

What is the primary purpose of taking the root server offline in a hierarchical Certificate Authority (CA) model?

• To optimize server performance

• To enhance encryption capabilities

• To mitigate the risk of a single point of failure

• To streamline certificate management