PKI DRILL (C839V5 AND D334) EXAM QUESTIONS
WITH CORRECT ANSWERS
An entity desiring a digital certificate must first generate ____.
a symmetric key
an asymmetric key pair
a registration authority
a certificate authority - ANSWER an asymmetric key pair
- A person who wants to get a digital certificate will first generate an
asymmetric key pair and then produce a certificate request, also called a
certificate signing request. That person will formally request a digital certificate
by presenting the CA with the public key of the generated key pair along with
the CSR.
4 Basic steps in obtaining a digitally signed digital certificate from a trusted
Certificate Authority:
The steps would be as follows: Step 1: Requestor generates a keypair-one
public, one private. Step 2: The requestor generates a Certificate Signing
Request (CSR) and submits the CSR (which includes the public key from the
key pair generated) to the CA. Step 3: The CA verifies the submission and
generates for the requestor his digital certificate. Step 4: CA signs the
Requester's digital certificate with CA's private key and issues the same to the
Requester.
Which encoding scheme for X.509 certificates supports Base64 and ASCII text
formats?
DER
CSR
, IKE
PEM - ANSWER PEM
- Two major encoding schemes for X.509 certificates: PEM (Base64, ASCII
text) format, and DER (binary) format.
A ___ validates the unique identifying information and public key information
submitted by a requester and creates a digital certificate which essentially binds
the requester's identity and public key to the certificate.
CSR
RA
CA
CRL - ANSWER CA
- When a requester sends a CSR to a CA in a secure, verifiable way, upon
reception, the CA shall verify that the requester is really who he says he is and
that he really sent that message, the public key belongs to the requester and is
the peer of the private key of the requester. Verifying that all the information
about identity, provided in the CSR, corresponds to the real identity against the
requestor, before creating the digital certificate for him.
The time period in which a digital certificate is considered valid and trusted is
known as the ____. CRL CSR cancelation stage period of validity - ANSWER
period of validity - Certificates are assigned a period of validity naming
convention or (length of time the cert is valid and should be trusted) when
created by way of a start and end date or expiration date. A certificate authority
will assign an issue date and an expiration date for each digital certificate it
creates and issues. Once the certificate expires it should no longer be trusted. If
the certificate encounters an issue warranting it not to be trusted prior to the
expiration, it will be revoked.
WITH CORRECT ANSWERS
An entity desiring a digital certificate must first generate ____.
a symmetric key
an asymmetric key pair
a registration authority
a certificate authority - ANSWER an asymmetric key pair
- A person who wants to get a digital certificate will first generate an
asymmetric key pair and then produce a certificate request, also called a
certificate signing request. That person will formally request a digital certificate
by presenting the CA with the public key of the generated key pair along with
the CSR.
4 Basic steps in obtaining a digitally signed digital certificate from a trusted
Certificate Authority:
The steps would be as follows: Step 1: Requestor generates a keypair-one
public, one private. Step 2: The requestor generates a Certificate Signing
Request (CSR) and submits the CSR (which includes the public key from the
key pair generated) to the CA. Step 3: The CA verifies the submission and
generates for the requestor his digital certificate. Step 4: CA signs the
Requester's digital certificate with CA's private key and issues the same to the
Requester.
Which encoding scheme for X.509 certificates supports Base64 and ASCII text
formats?
DER
CSR
, IKE
PEM - ANSWER PEM
- Two major encoding schemes for X.509 certificates: PEM (Base64, ASCII
text) format, and DER (binary) format.
A ___ validates the unique identifying information and public key information
submitted by a requester and creates a digital certificate which essentially binds
the requester's identity and public key to the certificate.
CSR
RA
CA
CRL - ANSWER CA
- When a requester sends a CSR to a CA in a secure, verifiable way, upon
reception, the CA shall verify that the requester is really who he says he is and
that he really sent that message, the public key belongs to the requester and is
the peer of the private key of the requester. Verifying that all the information
about identity, provided in the CSR, corresponds to the real identity against the
requestor, before creating the digital certificate for him.
The time period in which a digital certificate is considered valid and trusted is
known as the ____. CRL CSR cancelation stage period of validity - ANSWER
period of validity - Certificates are assigned a period of validity naming
convention or (length of time the cert is valid and should be trusted) when
created by way of a start and end date or expiration date. A certificate authority
will assign an issue date and an expiration date for each digital certificate it
creates and issues. Once the certificate expires it should no longer be trusted. If
the certificate encounters an issue warranting it not to be trusted prior to the
expiration, it will be revoked.
