WGU Introduction to Cryptography -
D334 Questions With Correct Answers
An dentity dlooking dto dobtain da ddigital dcertificate dmust dfirst dgenerate d____.
a dsymmetric dkey
an dasymmetric dkey dpair
a dregistration dauthority
a dcertificate dauthority d- dAnswer d- dan dasymmetric dkey dpair
-Someone dlooking dto dobtain da ddigital dcertificate dwill dfirst dgenerate dan dasymmetric dkey
dpair dand dthen dgenerate da dcertificate dsigning drequest d(CSR). dThe dperson dwill dprovide dthe
dCA dwith dthe dpublic dkey dfrom dthe dgenerated dkey dpair dalong dwith dthe dCSR dto dformally
drequest da ddigital dcertificate.
4 dBasic dsteps dfor dobtaining da ddigital dcertificate dsigned dby da dtrusted dCertificate dAuthority
d(CA):
Step d1: dRequester dgenerates da dkeypair d(one dpublic, done dprivate).
Step d2: dRequester dcreates da dCertificate dSigning dRequest d(CSR) dand dsubmits dCSR d(which
dincludes dpublic dkey dfrom dthe dkey dpair dgenerated) dto dthe dCA.
Step d3: dCA dvalidates dsubmission dand dgenerates dthe ddigital dcertificate dfor dthe drequester.
Step d4: dCA dsigns dthe drequester's ddigital dcertificate dwith dthe dCA's down dprivate dkey dand
dissues dcertificate dto dthe drequester.
Which dencoding dscheme dfor dX.509 dcertificates dsupports dBase64 dand dASCII dtext dformats?
DER
CSR
IKE
PEM d- dAnswer d- dPEM
- dTwo dmajor dencoding dschemes dfor dX.509 dcertificates: dPEM d(Base64, dASCII dtext) dformat,
dand dDER d(binary) dformat.
, A d___ dvalidates dthe dunique didentifying dinformation dand dpublic dkey dinformation dsubmitted
dby da drequester dand dcreates da ddigital dcertificate dwhich dessentially dbinds dthe drequester's
didentity dand dpublic dkey dto dthe dcertificate.
CSR
RA
CA
CRL d- dAnswer d- dCA
- dWhen da drequester dsends da dCSR dto da dCA din da dsecure, dverifiable dway, dupon dreceipt,
dthe dCA dwill: dverify dthe drequester dis dwho dthey dsay dthey dare dand dthat dthey dactually
dsent dthe dmessage, dverify dthe dpublic dkey dis dthe drequester's dkey dand dis dthe dmatch dto
dthe drequester's dprivate dkey, dand dverify dthe didentity dinformation dprovided din dthe dCSR dis
dcorrect dbefore dcreating dthe ddigital dcertificate dfor dthe drequester
The dtimeframe da ddigital dcertificate dis dconsidered dto dbe dvalid dand dcan dbe dtrusted, dis
dknown das dthe d_____.
CRL
CSR
cancelation dstage
period dof dvalidity d- dAnswer d- dperiod dof dvalidity
- dCertificates dreceive da dperiod dof dvalidity ddesignation d(timeframe dthe dcert dis dvalid dand
dshould dbe dtrusted) dat dcreation dvia da dstart dand dend ddate dor dexpiration ddate. dA
dcertificate dauthority dwill dassign dan dissue ddate dand dan dexpiration ddate dfor deach ddigital
dcertificate dit dcreates dand dissues. dOnce dthe dcertificate dexpires dit dshould dno dlonger dbe
dtrusted. dIf dthe dcertificate dencounters dan dissue dwarranting dit dnot dto dbe dtrusted dprior dto
dthe dexpiration, dit dwill dbe drevoked.
Which dmechanisms dfrom dthe dlist dbelow dcan dbe dchecked dto dverify dthe dvalidity dof da
ddigital dcertificate? dSelect dtwo.
CSR
OSCP
CRL
OCSP d- dAnswer d- dCRL
OCSP
D334 Questions With Correct Answers
An dentity dlooking dto dobtain da ddigital dcertificate dmust dfirst dgenerate d____.
a dsymmetric dkey
an dasymmetric dkey dpair
a dregistration dauthority
a dcertificate dauthority d- dAnswer d- dan dasymmetric dkey dpair
-Someone dlooking dto dobtain da ddigital dcertificate dwill dfirst dgenerate dan dasymmetric dkey
dpair dand dthen dgenerate da dcertificate dsigning drequest d(CSR). dThe dperson dwill dprovide dthe
dCA dwith dthe dpublic dkey dfrom dthe dgenerated dkey dpair dalong dwith dthe dCSR dto dformally
drequest da ddigital dcertificate.
4 dBasic dsteps dfor dobtaining da ddigital dcertificate dsigned dby da dtrusted dCertificate dAuthority
d(CA):
Step d1: dRequester dgenerates da dkeypair d(one dpublic, done dprivate).
Step d2: dRequester dcreates da dCertificate dSigning dRequest d(CSR) dand dsubmits dCSR d(which
dincludes dpublic dkey dfrom dthe dkey dpair dgenerated) dto dthe dCA.
Step d3: dCA dvalidates dsubmission dand dgenerates dthe ddigital dcertificate dfor dthe drequester.
Step d4: dCA dsigns dthe drequester's ddigital dcertificate dwith dthe dCA's down dprivate dkey dand
dissues dcertificate dto dthe drequester.
Which dencoding dscheme dfor dX.509 dcertificates dsupports dBase64 dand dASCII dtext dformats?
DER
CSR
IKE
PEM d- dAnswer d- dPEM
- dTwo dmajor dencoding dschemes dfor dX.509 dcertificates: dPEM d(Base64, dASCII dtext) dformat,
dand dDER d(binary) dformat.
, A d___ dvalidates dthe dunique didentifying dinformation dand dpublic dkey dinformation dsubmitted
dby da drequester dand dcreates da ddigital dcertificate dwhich dessentially dbinds dthe drequester's
didentity dand dpublic dkey dto dthe dcertificate.
CSR
RA
CA
CRL d- dAnswer d- dCA
- dWhen da drequester dsends da dCSR dto da dCA din da dsecure, dverifiable dway, dupon dreceipt,
dthe dCA dwill: dverify dthe drequester dis dwho dthey dsay dthey dare dand dthat dthey dactually
dsent dthe dmessage, dverify dthe dpublic dkey dis dthe drequester's dkey dand dis dthe dmatch dto
dthe drequester's dprivate dkey, dand dverify dthe didentity dinformation dprovided din dthe dCSR dis
dcorrect dbefore dcreating dthe ddigital dcertificate dfor dthe drequester
The dtimeframe da ddigital dcertificate dis dconsidered dto dbe dvalid dand dcan dbe dtrusted, dis
dknown das dthe d_____.
CRL
CSR
cancelation dstage
period dof dvalidity d- dAnswer d- dperiod dof dvalidity
- dCertificates dreceive da dperiod dof dvalidity ddesignation d(timeframe dthe dcert dis dvalid dand
dshould dbe dtrusted) dat dcreation dvia da dstart dand dend ddate dor dexpiration ddate. dA
dcertificate dauthority dwill dassign dan dissue ddate dand dan dexpiration ddate dfor deach ddigital
dcertificate dit dcreates dand dissues. dOnce dthe dcertificate dexpires dit dshould dno dlonger dbe
dtrusted. dIf dthe dcertificate dencounters dan dissue dwarranting dit dnot dto dbe dtrusted dprior dto
dthe dexpiration, dit dwill dbe drevoked.
Which dmechanisms dfrom dthe dlist dbelow dcan dbe dchecked dto dverify dthe dvalidity dof da
ddigital dcertificate? dSelect dtwo.
CSR
OSCP
CRL
OCSP d- dAnswer d- dCRL
OCSP
