PKI DRILL (C839V5 AND D334) WGU
QUESTIONS & ANSWERS, SCORED A+
TO PASS!!
1 of 26
Term
A ____ is a trusted third party that creates and issues digital
certificates.
RA
CA CSR
DER
Give this one a try later!
, PKCS #5 CA
-PKCS #5 (RFC 2859) is a -The certificate authority
standard used for password- (CA) is a trusted 3rd party
based that
encryption. creates and issues digital
certificates.
X.509
PKCS #7
-X.509 is an International
-PKCS #7 (RFC 2815) is used to
Telecommunication Union
sign and/or encrypt messages
(ITU) standard defining the
for PKI.
format of public key
certificates.
Don't know?
2 of 26
Term
Which encoding scheme for X.509 certificates supports
binary format?
DER
PEM
IKE
CSR
Give this one a try later!
CRL
OCSP
-One can check the CRL (Certificate Revocation List), and/or OCSP (Online
Certificate Status Protocol) to verify whether a certificate has been
revoked or not.
, .cer
-The .cer file type can be used with both the PEM (Base64 & ASCII), and
the DER (binary) encoding schemes. PEM also can use .pem, .crt,
and .key file types. DEM can also use the .dem file type.
PEM
- Two major encoding schemes for X.509 certificates: PEM (Base64,
ASCII text) format, and DER (binary) format.
DER
-Two major encoding schemes for X.509 certificates: PEM (Base64,
ASCII text) format, and DER (binary) format.
Don't know?
3 of 26
Term
Which public-key cryptography standard is used to bundle
a private key with its X.509 certificate or to bundle all the
members of a chain of trust?
PKCS #9
PKCS #12
PKCS #5
PKCS #7
Give this one a try later!
key pair (one private key, one public key)
, PKCS #10
-PKCS#10 is a standard format for requesting digital certificates
from certificate authorities. Remember, the Certificate Signing Request
(CSR) is what a requester would submit to the CA to formally request
a certificate. PKCS #10 is the most common format used with CSRs.
CRL
OCSP
-One can check the CRL (Certificate Revocation List), and/or OCSP (Online
Certificate Status Protocol) to verify whether a certificate has been
revoked or not.
PKCS #12
Don't know?
4 of 26
Term
An entity looking to obtain a digital certificate, will create
and submit a _____ to the CA to formally request the
certificate.
CSR
PEM
PKC
S
registration authority
Give this one a try later!
QUESTIONS & ANSWERS, SCORED A+
TO PASS!!
1 of 26
Term
A ____ is a trusted third party that creates and issues digital
certificates.
RA
CA CSR
DER
Give this one a try later!
, PKCS #5 CA
-PKCS #5 (RFC 2859) is a -The certificate authority
standard used for password- (CA) is a trusted 3rd party
based that
encryption. creates and issues digital
certificates.
X.509
PKCS #7
-X.509 is an International
-PKCS #7 (RFC 2815) is used to
Telecommunication Union
sign and/or encrypt messages
(ITU) standard defining the
for PKI.
format of public key
certificates.
Don't know?
2 of 26
Term
Which encoding scheme for X.509 certificates supports
binary format?
DER
PEM
IKE
CSR
Give this one a try later!
CRL
OCSP
-One can check the CRL (Certificate Revocation List), and/or OCSP (Online
Certificate Status Protocol) to verify whether a certificate has been
revoked or not.
, .cer
-The .cer file type can be used with both the PEM (Base64 & ASCII), and
the DER (binary) encoding schemes. PEM also can use .pem, .crt,
and .key file types. DEM can also use the .dem file type.
PEM
- Two major encoding schemes for X.509 certificates: PEM (Base64,
ASCII text) format, and DER (binary) format.
DER
-Two major encoding schemes for X.509 certificates: PEM (Base64,
ASCII text) format, and DER (binary) format.
Don't know?
3 of 26
Term
Which public-key cryptography standard is used to bundle
a private key with its X.509 certificate or to bundle all the
members of a chain of trust?
PKCS #9
PKCS #12
PKCS #5
PKCS #7
Give this one a try later!
key pair (one private key, one public key)
, PKCS #10
-PKCS#10 is a standard format for requesting digital certificates
from certificate authorities. Remember, the Certificate Signing Request
(CSR) is what a requester would submit to the CA to formally request
a certificate. PKCS #10 is the most common format used with CSRs.
CRL
OCSP
-One can check the CRL (Certificate Revocation List), and/or OCSP (Online
Certificate Status Protocol) to verify whether a certificate has been
revoked or not.
PKCS #12
Don't know?
4 of 26
Term
An entity looking to obtain a digital certificate, will create
and submit a _____ to the CA to formally request the
certificate.
CSR
PEM
PKC
S
registration authority
Give this one a try later!
