WGU Introduction to Cryptography - D334 exam with answers 2025

WGU Introduction to Cryptography - D334
EXAMS WITH ANSWERS




An entity looking to obtain a digital certificate must first generate ____.
a symmetric key
an asymmetric key pair
a registration authority
a certificate authority - CORRECT ANSWERS-an asymmetric key pair
-Someone looking to obtain a digital certificate will first generate an asymmetric key pair
and then generate a certificate signing request (CSR). The person will provide the CA
with the public key from the generated key pair along with the CSR to formally request a
digital certificate.
4 Basic steps for obtaining a digital certificate signed by a trusted Certificate Authority
(CA):
Step 1: Requester generates a keypair (one public, one private).
Step 2: Requester creates a Certificate Signing Request (CSR) and submits CSR
(which includes public key from the key pair generated) to the CA.
Step 3: CA validates submission and generates the digital certificate for the requester.
Step 4: CA signs the requester's digital certificate with the CA's own private key and
issues certificate to the requester.

Which encoding scheme for X.509 certificates supports Base64 and ASCII text formats?
DER
CSR
IKE
PEM - CORRECT ANSWERS-PEM
- Two major encoding schemes for X.509 certificates: PEM (Base64, ASCII text) format,
and DER (binary) format.

A ___ validates the unique identifying information and public key information submitted
by a requester and creates a digital certificate which essentially binds the requester's
identity and public key to the certificate.
CSR
RA
CA
CRL - CORRECT ANSWERS-CA

, - When a requester sends a CSR to a CA in a secure, verifiable way, upon receipt, the
CA will: verify the requester is who they say they are and that they actually sent the
message, verify the public key is the requester's key and is the match to the requester's
private key, and verify the identity information provided in the CSR is correct before
creating the digital certificate for the requester

The timeframe a digital certificate is considered to be valid and can be trusted, is known
as the _____.
CRL
CSR
cancelation stage
period of validity - CORRECT ANSWERS-period of validity
- Certificates receive a period of validity designation (timeframe the cert is valid and
should be trusted) at creation via a start and end date or expiration date. A certificate
authority will assign an issue date and an expiration date for each digital certificate it
creates and issues. Once the certificate expires it should no longer be trusted. If the
certificate encounters an issue warranting it not to be trusted prior to the expiration, it
will be revoked.

Which mechanisms from the list below can be checked to verify the validity of a digital
certificate? Select two.
CSR
OSCP
CRL
OCSP - CORRECT ANSWERS-CRL
OCSP
-One can check the CRL (Certificate Revocation List), and/or OCSP (Online Certificate
Status Protocol) to verify whether a certificate has been revoked or not.

An entity looking to obtain a digital certificate will provide the CA with ___ and ____ as
part of the initial request.
a CSR; their public key
a CSR; their private key
their public key; their private key - CORRECT ANSWERS-a CSR; their public key
-Someone looking to obtain a digital certificate will first generate an asymmetric key pair
and then generate a certificate signing request (CSR). The person will provide the CA
with the public key from the generated key pair along with the CSR to formally request a
digital certificate.

Certificate expiration occurs during which stage of certificate management?
Initialization
Issued
Cancellation
Hold - CORRECT ANSWERS-Cancellation
-Certificate management stages include: