19. Digital Certificates and Trust in IT Security

What is a digital certificate primarily used for?

• Encrypting data

• Establishing trust

• Storing passwords

• Managing network traffic

Which entity is responsible for digitally signing a digital certificate?

• User

• Certificate Authority

• Firewall

• Web server

What is the standardized format for digital certificates called?

• TLS

• X.509

• X.500

• SSL

What information is NOT typically found in a digital certificate?

• Private key

• Public key

• Signature algorithm

• Serial number

What is the purpose of a Certificate Signing Request (CSR)?

• To verify a user's identity

• To encrypt data

• To request a certificate from a Certificate Authority

• To revoke a certificate

What is the main role of a Certificate Authority in the context of digital certificates?

• Storing user passwords

• Encrypting data

• Validating and signing certificates

• Managing network traffic

What is a wildcard certificate used for?

• Encrypting multiple types of data

• Securing multiple subdomains

• Managing multiple user accounts

• Revoking multiple certificates

What is a Certificate Revocation List (CRL)?

• A list of trusted certificates

• A list of expired certificates

• A list of revoked certificates

• A list of valid certificates

What protocol is used to provide real-time status of a certificate's validity?

• OCSP

• TLS

• HTTP

• SSL

What is the purpose of OCSP stapling?

• To create a new certificate

• To encrypt data during transmission

• To revoke certificates

• To embed certificate status in the SSL handshake