Understanding HTTPS and Digital Signatures

What does the lock icon in a browser's address bar primarily indicate?

• The website is completely safe and trustworthy.

• The connection to the website is encrypted and the server's identity is verified.

• The website has been approved by a government agency.

• The website does not collect any personal data.

When sending data across the public internet, what are the two main security concerns addressed by encryption and authentication?

• Ensuring data is always public and easily accessible.

• Preventing data from being read by unauthorized parties and verifying the identity of the connected website.

• Speeding up data transfer and reducing internet costs.

• Allowing multiple users to access the same data simultaneously.

What does a browser's "secure connection" status (HTTPS/TLS) guarantee regarding the website you are connected to?

• The website is free from malware and phishing attempts.

• The website's content is appropriate for all ages.

• The connection is encrypted, and the server's identity has been verified by a trusted third party.

• All information shared on the website will remain anonymous.

Is it possible for a website with a secure HTTPS connection to still be unsafe or malicious?

• No, a secure HTTPS connection guarantees the website is safe.

• Yes, HTTPS only ensures the connection is encrypted and the server's identity is verified, not the website's trustworthiness.

• Only if the user's computer is infected with a virus.

• Only if the website is hosted on a foreign server.

In symmetric key encryption, what is the relationship between the key used for encrypting a message and the key used for decrypting it?

• They are different keys, one public and one private.

• They are the same key.

• The encryption key is derived from the decryption key.

• The decryption key is only known by a third-party authority.

What is a key characteristic of asymmetric key encryption, also known as public key cryptography?

• It uses a single shared secret key for both encryption and decryption.

• It requires a private meeting to exchange the encryption key securely.

• It uses a pair of keys: a public key for encryption and a private key for decryption.

• It is computationally less efficient than symmetric key encryption for large amounts of data.

How does HTTPS typically combine symmetric and asymmetric encryption to establish a secure connection?

• It uses asymmetric encryption for all data transfer due to its speed.

• It uses symmetric encryption to exchange the public key, then asymmetric encryption for data.

• It uses asymmetric encryption to securely exchange a symmetric key, then uses the symmetric key for faster data transfer.

• It relies solely on a single, universally known public key for all communications.

What is the primary purpose of a digital certificate in web communication?

• To encrypt all data exchanged between a client and server.

• To verify the identity of a website and provide its public key.

• To store user login credentials securely.

• To prevent denial-of-service attacks.

What is the main responsibility of a Certificate Authority (CA)?

• To encrypt all internet traffic.

• To host websites and manage domain names.

• To issue certificates after validating the domain owner's identity.

• To monitor for malicious website activity.

What is the primary function of a digital signature?

• To encrypt the entire message for confidentiality.

• To verify the authenticity and integrity of a message.

• To generate random encryption keys.

• To compress data for faster transmission.