CASP+: Understanding Certificate Usage Quiz

What is client authentication?

• D. Checking the integrity of a message

• A. Verifying that a connection request is originating from a preauthorized endpoint

• C. Authenticating a server

• B. Encrypting messages using a private key

How can SSH use public key authentication?

• D. By decrypting the signature using a public key

• C. By calculating a unique checksum from input

• B. By specifying a remote user's public key in a locally stored list of authorized keys on the SSH server

• A. By encrypting the message with a private key

What is the purpose of server authentication?

• D. To restrict software from running on a host

• C. To calculate a checksum from input

• B. To verify the server is genuine

• A. To encrypt messages in a way that no one else can

How can a sender authenticate a message using public key cryptography?

• A. By encrypting the message with a private key

• C. By encrypting the digest using a private key

• D. By specifying a remote user's public key in a locally stored list of authorized keys

• B. By calculating a unique checksum from input

What is the purpose of hashing in digital signatures?

• D. To guarantee the validity of a software application

• C. To prove integrity by computing a unique checksum from input

• B. To authenticate a sender

• A. To verify the originator of software

How does a digital signature authenticate a sender?

• A. By encrypting the message with a private key

• B. By decrypting the signature using a public key

• C. By calculating a checksum from input

• D. By attaching the digital signature to the original message

What is the purpose of code signing certificates?

• D. To verify the originator of software

• B. To authenticate a sender

• C. To guarantee the validity of a software application

• A. To encrypt messages in a way that no one else can

How can software be verified to come from a trusted source?

• D. By calculating a checksum from input

• C. By signing the executables or DLLs that make up the program

• A. By encrypting the message with a private key

• B. By specifying a remote user's public key in a locally stored list of authorized keys

What does the presence of a code signature validate?

• D. The server's authenticity

• A. The originator of the software

• B. The quality of the code

• C. The integrity of the message

How can code signing be used to restrict software from running on a host?

• B. By specifying a remote user's public key in a locally stored list of authorized keys

• A. By encrypting the message with a private key

• D. By calculating a checksum from input

• C. By signing the executables or DLLs that make up the program