012_Public Key Infrastructure - CompTIA Security+ Sy0-701 - 1.4

What does PKI stand for in the context of cryptography?

• Public Key Infrastructure

• Private Key Interface

• Public Key Integration

• Private Key Infrastructure

Which of the following is a characteristic of symmetric encryption?

• Uses two different keys for encryption and decryption

• Uses the same key for both encryption and decryption

• Requires a Certificate Authority for operation

• Is slower than asymmetric encryption

In asymmetric encryption, what is the role of the public key?

• It is used to decrypt data

• It is kept secret by the owner

• It is used to encrypt data

• It is used to generate the private key

Explain why symmetric encryption might pose scalability issues in large networks.

• Because it requires a Certificate Authority for each user

• Because the same key must be shared among all users, increasing the risk of key compromise

• Because it is slower than asymmetric encryption

• Because it requires more computational power

Describe a scenario where key escrow might be necessary in an organization.

• When an organization wants to ensure data can be decrypted even if the original user is unavailable

• When an organization wants to increase the speed of encryption

• When an organization wants to reduce the number of keys in use

• When an organization wants to eliminate the need for a Certificate Authority

What is the primary advantage of using asymmetric encryption over symmetric encryption?

• It is faster than symmetric encryption

• It eliminates the need for key management

• It allows secure communication without sharing a secret key

• It requires less computational power

How does a Certificate Authority (CA) contribute to the trust model in PKI?

• By encrypting data with a public key

• By verifying the identity of entities and issuing digital certificates

• By storing private keys securely

• By generating public/private key pairs

Analyze the potential risks associated with storing a private key without a password.

• It increases the speed of decryption

• It makes the private key vulnerable to unauthorized access

• It reduces the complexity of key management

• It ensures the private key is always available

Evaluate the effectiveness of using a third-party key management service in a large organization.

• It eliminates the need for encryption

• It centralizes key management, reducing the risk of key loss

• It increases the complexity of encryption algorithms

• It requires each user to manage their own keys

Consider the example of Alice and Bob. Why is it important for Alice to keep her private key secure?

• To ensure Bob can encrypt messages to her

• To prevent unauthorized decryption of messages intended for her

• To allow others to verify her identity

• To enable the generation of new public keys