PKI Drill (C839v5 And D334) – Questions With Clear
Solutions
Save
Students also studied
Lesson 10 Vocab Biology Vocab for test WSC 2026: Are we th
Teacher 13 terms 41 terms Teacher 156 terms
barensen Preview jxcoby_pw Preview Amy_Woodall4
Terms in this set (26)
An entity looking to obtain a digital an asymmetric key pair
certificate must first generate ____. -Someone looking to obtain a digital certificate will first
a symmetric key generate an asymmetric key pair and then generate a
an asymmetric key pair certificate signing request (CSR). The person will provide the
a registration authority CA with the public key from the generated key pair along with
a certificate authority the CSR to formally request a digital certificate.
4 Basic steps for obtaining a digital certificate signed by a
trusted Certificate Authority (CA):
Step 1: Requester generates a keypair (one public, one
private).
Step 2: Requester creates a Certificate Signing Request (CSR)
and submits CSR (which includes public key from the key pair
generated) to the CA.
Step 3: CA validates submission and generates the digital
certificate for the requester.
Step 4: CA signs the requester's digital certificate with the CA's
own private key and issues certificate to the requester.
Which encoding scheme for X.509 PEM
certificates supports Base64 and ASCII text - Two major encoding schemes for X.509 certificates: PEM
formats? (Base64, ASCII text) format, and DER (binary) format.
DER
CSR
IKE
PEM
A ___ validates the unique identifying CA
information and public key information - When a requester sends a CSR to a CA in a secure, verifiable
submitted by a requester and creates a way, upon receipt, the CA will: verify the requester is who they
digital certificate which essentially binds the say they are and that they actually sent the message, verify the
requester's identity and public key to the public key is the requester's key and is the match to the
certificate. requester's private key, and verify the identity information
CSR provided in the CSR is correct before creating the digital
RA certificate for the requester
CA
CRL
, The timeframe a digital certificate is period of validity
considered to be valid and can be trusted, - Certificates receive a period of validity designation
is known as the _____. (timeframe the cert is valid and should be trusted) at creation
CRL via a start and end date or expiration date. A certificate
CSR authority will assign an issue date and an expiration date for
cancelation stage each digital certificate it creates and issues. Once the
period of validity certificate expires it should no longer be trusted. If the
certificate encounters an issue warranting it not to be trusted
prior to the expiration, it will be revoked.
Which mechanisms from the list below can CRL
be checked to verify the validity of a digital OCSP
certificate? Select two. -One can check the CRL (Certificate Revocation List), and/or
CSR OCSP (Online Certificate Status Protocol) to verify whether a
OSCP certificate has been revoked or not.
CRL
OCSP
An entity looking to obtain a digital a CSR; their public key
certificate will provide the CA with ___ and -Someone looking to obtain a digital certificate will first
____ as part of the initial request. generate an asymmetric key pair and then generate a
a CSR; their public key certificate signing request (CSR). The person will provide the
a CSR; their private key CA with the public key from the generated key pair along with
their public key; their private key the CSR to formally request a digital certificate.
Certificate expiration occurs during which Cancellation
stage of certificate management? -Certificate management stages include:
Initialization Initialization Stage (certificate registration, certificate
Issued creation/distribution, certificate dissemination)
Cancellation Issued Stage (certificate retrieval, certificate validation)
Hold Cancellation Stage (certificate expiration, certificate
revocation)
What action does a CA take prior to CA signs the list with the CA's own private key
publishing a CRL to ensure the list can be -The CA will sign the list with the CA's own private key so that
validated as authentic by those checking it the list may be validated as authentic using the CA's shared
for certificate statuses? public key.
CA duplicates the list
CA signs the list with the CA's own public
key
CA signs the list with the CA's own private
key
An entity looking to obtain a digital CSR
certificate, will create and submit a _____ to -Someone looking to obtain a digital certificate will first
the CA to formally request the certificate. generate an asymmetric key pair and then generate a
CSR certificate signing request (CSR). The person will provide the
PEM CA with the public key from the generated key pair along with
PKCS the CSR to formally request a digital certificate.
registration authority 4 Basic steps for obtaining a digital certificate signed by a
trusted Certificate Authority (CA):
Step 1: Requester generates a keypair (one public, one
private).
Step 2: Requester creates a Certificate Signing Request (CSR)
and submits CSR (which includes public key from the key pair
generated) to the CA.
Step 3: CA validates submission and generates the digital
certificate for the requester.
Step 4: CA signs the requester's digital certificate with the CA's
own private key and issues certificate to the requester.
Solutions
Save
Students also studied
Lesson 10 Vocab Biology Vocab for test WSC 2026: Are we th
Teacher 13 terms 41 terms Teacher 156 terms
barensen Preview jxcoby_pw Preview Amy_Woodall4
Terms in this set (26)
An entity looking to obtain a digital an asymmetric key pair
certificate must first generate ____. -Someone looking to obtain a digital certificate will first
a symmetric key generate an asymmetric key pair and then generate a
an asymmetric key pair certificate signing request (CSR). The person will provide the
a registration authority CA with the public key from the generated key pair along with
a certificate authority the CSR to formally request a digital certificate.
4 Basic steps for obtaining a digital certificate signed by a
trusted Certificate Authority (CA):
Step 1: Requester generates a keypair (one public, one
private).
Step 2: Requester creates a Certificate Signing Request (CSR)
and submits CSR (which includes public key from the key pair
generated) to the CA.
Step 3: CA validates submission and generates the digital
certificate for the requester.
Step 4: CA signs the requester's digital certificate with the CA's
own private key and issues certificate to the requester.
Which encoding scheme for X.509 PEM
certificates supports Base64 and ASCII text - Two major encoding schemes for X.509 certificates: PEM
formats? (Base64, ASCII text) format, and DER (binary) format.
DER
CSR
IKE
PEM
A ___ validates the unique identifying CA
information and public key information - When a requester sends a CSR to a CA in a secure, verifiable
submitted by a requester and creates a way, upon receipt, the CA will: verify the requester is who they
digital certificate which essentially binds the say they are and that they actually sent the message, verify the
requester's identity and public key to the public key is the requester's key and is the match to the
certificate. requester's private key, and verify the identity information
CSR provided in the CSR is correct before creating the digital
RA certificate for the requester
CA
CRL
, The timeframe a digital certificate is period of validity
considered to be valid and can be trusted, - Certificates receive a period of validity designation
is known as the _____. (timeframe the cert is valid and should be trusted) at creation
CRL via a start and end date or expiration date. A certificate
CSR authority will assign an issue date and an expiration date for
cancelation stage each digital certificate it creates and issues. Once the
period of validity certificate expires it should no longer be trusted. If the
certificate encounters an issue warranting it not to be trusted
prior to the expiration, it will be revoked.
Which mechanisms from the list below can CRL
be checked to verify the validity of a digital OCSP
certificate? Select two. -One can check the CRL (Certificate Revocation List), and/or
CSR OCSP (Online Certificate Status Protocol) to verify whether a
OSCP certificate has been revoked or not.
CRL
OCSP
An entity looking to obtain a digital a CSR; their public key
certificate will provide the CA with ___ and -Someone looking to obtain a digital certificate will first
____ as part of the initial request. generate an asymmetric key pair and then generate a
a CSR; their public key certificate signing request (CSR). The person will provide the
a CSR; their private key CA with the public key from the generated key pair along with
their public key; their private key the CSR to formally request a digital certificate.
Certificate expiration occurs during which Cancellation
stage of certificate management? -Certificate management stages include:
Initialization Initialization Stage (certificate registration, certificate
Issued creation/distribution, certificate dissemination)
Cancellation Issued Stage (certificate retrieval, certificate validation)
Hold Cancellation Stage (certificate expiration, certificate
revocation)
What action does a CA take prior to CA signs the list with the CA's own private key
publishing a CRL to ensure the list can be -The CA will sign the list with the CA's own private key so that
validated as authentic by those checking it the list may be validated as authentic using the CA's shared
for certificate statuses? public key.
CA duplicates the list
CA signs the list with the CA's own public
key
CA signs the list with the CA's own private
key
An entity looking to obtain a digital CSR
certificate, will create and submit a _____ to -Someone looking to obtain a digital certificate will first
the CA to formally request the certificate. generate an asymmetric key pair and then generate a
CSR certificate signing request (CSR). The person will provide the
PEM CA with the public key from the generated key pair along with
PKCS the CSR to formally request a digital certificate.
registration authority 4 Basic steps for obtaining a digital certificate signed by a
trusted Certificate Authority (CA):
Step 1: Requester generates a keypair (one public, one
private).
Step 2: Requester creates a Certificate Signing Request (CSR)
and submits CSR (which includes public key from the key pair
generated) to the CA.
Step 3: CA validates submission and generates the digital
certificate for the requester.
Step 4: CA signs the requester's digital certificate with the CA's
own private key and issues certificate to the requester.
