PKI Training Advanced - Day 2

What is the main purpose of PKI governance?

• To enable faster certificate issuance

• To ensure compliance and manage trust through policies

• To encrypt data at rest

• To configure firewalls

Which document defines what must be done in a PKI system?

• Certification Practice Statement (CPS)

• Certificate Lifecycle Policy

• Certificate Policy (CP)

• Root Signing Agreement

Who verifies user identity before certificate issuance?

• CA Administrator

• Auditor

• RA Officer

• Security Officer

Which of the following best describes the CPS?

• It lists all certificates issued by the CA

• It details how the CA implements the CP

• It tracks financial spending of the PKI

• It encrypts user data

In the rulebook vs playbook analogy, what does the CP represent?

• Playbook

• Team logo

• Rulebook

• Referee manual

Which role is responsible for daily secure operations and access control?

• Auditor

• Policy Authority

• RA Officer

• Security Officer / PKI Manager

What does the Policy Authority (PA) do?

• Issues and revokes certificates

• Monitors logs

• Defines and approves PKI policies

• Performs key ceremonies

What is the primary responsibility of the CA Administrator?

• Policy writing

• User identity verification

• Issuing and revoking certificates

• Conducting audits

Which of the following is a reason for internal PKI audits?

• To ensure encryption algorithms are unbreakable

• To create new CP documents

• To check compliance with CP/CPS

• To measure network bandwidth

Why is separation of duties important in PKI roles?

• To reduce paperwork

• To allow faster key generation

• To prevent any single point of failure or misuse

• To simplify system configuration