PNPKI

What is Public Key Infrastructure (PKI)?

• A system for managing digital certificates and public-key encryption.

• A method for storing passwords securely.

• A type of firewall.

• An algorithm for data compression.

What are the two main components of PKI?

• Public Key and Private Key

• Digital Certificates and Cryptography

• Root CA and GovCA

• All of the above

What is the primary purpose of a Certificate Authority (CA)?

• To generate private keys.

• To sign digital certificates.

• To store data securely.

• To encrypt data.

What is a digital certificate?

• A file that encrypts data.

• A document that verifies the identify of a user or device.

• A physical key for access control.

• A password management tool.

What is the difference between a public key and a private key in terms of email signing?

• Public keys are used for encryption, private keys for decryption.

• Public keys are kept secret, private keys are shared.

• Public keys are used for signing, private keys for verifying.

• Public keys are used for hashing, private keys for salting.

How does a digital signature work?

• It encrypts the message content.

• It verifies the sender's identity and message integrity.

• It compresses the message to save space.

• It translates the message into another language.

According to the Executive Order No. 810, which of the following is the main barrier for growth of electronic commerce and wide use of e-government services in the country?

• Lack of fast internet connection

• Lack of digital literacy

• Lack of security

• Lack of applicable policy

Which of the following is a circumstance where a PNPKI CA Certificate will be revoked?

• Key Compromise

• PNPKI CA violates its CP/CPS

• Stop of Operation

• All of the above

A subscriber reported that the he could not locate his digital certificate file. What is the first thing that the RA officer should do after verifying the identity of the subscriber?

• Inform subscriber that he/she may already request a new certificate.

• Check if it is still possible to retrieve the digital certificate file in the browser/computer where it was installed.

• Revoke existing certificate and require certificate revocation form.

• Ignore the claims of the subscriber.

What is a Certificate Revocation List (CRL)?

• A list of expired certificates.

• A list of certificates that are still valid.

• A list of certificates that have been revoked by the CA.

• A list of certificates pending approval.