ICS CIE-III

1. 1.What is the primary purpose of a Public Key Infrastructure (PKI)?

• To generate symmetric keys

• To manage and distribute digital certificates and public keys

• To encrypt emails only

• To monitor network traffic

2. 2.Which of the following is not a field in an X.509 digital certificate?
   
   

• Serial Number

• Issuer Name

• Symmetric Key
  
  

• Subject Name

3.The Needham-Schroeder protocol is used for:

• Error detection

• Authentication using symmetric keys

• Routing table management

• File encryption

4.In Kerberos authentication, the Ticket Granting Server (TGS) is responsible for:

• Generating session keys for users

• Encrypting all network traffic

• Issuing service tickets to authenticated users

• Storing public keys

5.Which feature is inherent to IPv6 and optional in IPv4?

• ARP

• IPsec support

• Broadcast addressing

• NAT

6.HTTPS uses which protocol to provide secure communication over HTTP?

• TLS/SSL

• IPsec

• Kerberos

• PGP

7.Which of the following uses a combination of symmetric and asymmetric encryption for securing emails?

• FTP

• PGP

• HTTP

• Telnet

8.Which type of firewall filters packets based only on source and destination IP addresses and ports?

• Packet-filtering firewall

• Circuit-level gateway

• Application-level gateway

• Stateful inspection firewall

9.In Kerberos, the session key shared between client and server is issued by:

• Authentication Server (AS)

• Ticket Granting Server (TGS)

• Key Distribution Center (KDC)

• Both AS and TGS collaboratively

10.A Security Association (SA) in IPsec is uniquely identified by:
A)
B)
C)
D)
Answer: A

• Source IP, Destination IP, and SPI (Security Parameters Index)

• SPI and Port Number

• Source IP only

• Authentication Header only