CASP+ : Chapter 10A

Data Security Mechanism: What mechanism is used to encrypt data present in volatile memory, such as documents open in applications or database data being modified, to prevent unauthorized access by untrusted processes?

• Whole Disk Encryption

• TLS encryption

• VPN encryption

• Trusted Execution Environment (TEE)

Data Protection Protocol: Which protocol is commonly used to protect data being transmitted over a network, such as website traffic or remote access data?

• IPSec

• ECDSA

• SSH

• HTTP

PKI Support of Automation: How does PKI enhance automation in managing network access control?

• By encrypting all network traffic

• By requiring manual authentication for all devices

• By automating the generation and distribution of certificates

• By restricting access based on IP addresses

Strong Authentication Device: What device is used to provide strong authentication by storing a user's digital certificate, associated private key, and requiring a personal identification number (PIN)?

• TPM (Trusted Platform Module)

• HSM (Hardware Security Module)

• Smart card

• USB token

Bridge CA Functionality: What role does a bridge CA play in federated PKI, and how does it facilitate trust between independent PKI hierarchies?

• A bridge CA merges separate PKI hierarchies into a single unified structure.

• A bridge CA issues root certificates to all independent PKI hierarchies.

• A bridge CA acts as an intermediary, issuing cross-certificates to establish trust paths between separate root CAs.

• A bridge CA manages all cryptographic keys for independent PKI hierarchies.

Purpose of Digital Certificates: What is the primary purpose of a digital certificate?

• Encrypting messages

• Securing web server communications

• Authenticating users

• Generating digital signatures

Smart Card Authentication: Which cryptographic information is typically programmed onto a smart card with a secure processing chip for authentication purposes?

• Public key and PIN

• Digital signature and passphrase

• Digital certificate, private key, and PIN

• Session key and biometric data

Automated Incident Response: What role does Security Orchestration, Automation, and Response (SOAR) platforms play in incident management within an advanced PKI implementation?

• They perform manual analysis of incidents

• They trigger alerts for all detected incidents

• They use predefined playbooks to automate incident evaluation and response

• They provide real-time monitoring of network traffic

Secure Communication: How does PKI enable secure communication over untrusted connections?

• By encrypting messages with symmetric encryption keys.

• By using digital signatures to verify message integrity.

• By centralizing digital certificate standards and cryptographic services.

• By distributing private keys to all communication endpoints.

PKI Functionality: Which of the following statements accurately describes a function of Public Key Infrastructure (PKI)?

• PKI encrypts messages using symmetric encryption keys.

• PKI distributes encryption keys over untrusted connections.

• PKI generates digital signatures using public keys.

• PKI manages public/private keys, ensures integrity through digital signatures, and provides authentication through private key encryption.