CASP+: Certificate Management and Trust Concepts Quiz

What is the main advantage of the hierarchical trust model?

• Root CA is self-signed

• Single point of failure

• Different certificate policies for intermediate CAs

• Cross certification

What is the purpose of cross certification?

• Self-sign the root CA certificate

• Create a single CA hierarchy

• Establish trust between two different CAs

• Implement certificate profiles

Where are trusted providers typically stored?

• Within the certificate profiles

• In the root CA server

• Modern browsers or operating system configurations

• Within the intermediate CAs

What is the function of certificate profiles?

• Define the root CA hierarchy

• Define the set of expected certificates within an organization

• Deploy certificates to endpoints

• Manage the life cycle of certificates

What is an essential element of certificate life cycle management?

• Self-signing the root CA

• Cross certification

• Careful management of certificates and private keys

• Importing additional CAs

What is the main drawback of the single CA trust model?

• Cross certification

• Root CA is self-signed

• Single point of failure

• Different certificate policies for intermediate CAs

What does the root CA being a single point of failure mean?

• It issues certificates to end entities

• If compromised, the whole PKI collapses

• It is very exposed

• It is self-signed

What is the purpose of certificate chaining in the hierarchical trust model?

• To define certificate profiles

• To import additional CAs

• To trace leaf certificates back to the root CA

• To establish trust between two different CAs

How can the hierarchical trust model mitigate the risk of the root CA being compromised?

• By self-signing the root CA certificate

• By taking the root server offline

• By expanding the list of trusted providers

• By implementing cross certification

What is the purpose of integrating two organizations' PKIs using cross certification?

• To import additional CAs

• To define certificate profiles

• To build a new PKI and migrate resources

• To establish trust between two different CAs