PKI Test

What is the standard that defines the format used with public-key digital certificates?

x.509

An entity looking to obtain a digital certificate will create and submit a _____ to the CA to formally request the certificate.

CSR

Which mechanisms can be checked to verify the validity of a digital certificate?

CRL And OCSP

What action does a CA take prior to publishing a CRL to ensure authenticity?

CA signs the list with the CA's own private key

_____ is a public-key cryptography standard used to sign and/or encrypt messages for PKI.

PKCS #7

An entity looking to obtain a digital certificate must first generate _____.

an asymmetric key pair

Certificate creation occurs during which stage of certificate management?

Issued

Certificate revocation lists are published by _____.

the issuing CA

The timeframe a digital certificate is considered to be valid and can be trusted is known as the _____.

period of validity

Which encoding scheme for X.509 certificates supports binary format?

DER

Certificate validation occurs during which stage of certificate management?

Issued

Public key cryptography involves the use of a ____ for encryption and decryption.

key pair (one private key, one public key)

If Shawn were to generate a CSR to submit to a CA, what PKCS standard would be used?

PKCS #10

A ____ is a trusted third party that creates and issues digital certificates.

CA

An entity seeking a digital certificate will provide the CA with ___ and ____ as part of the initial request.

a CSR; their public key

Which public-key cryptography standard is used to bundle a private key with its X.509 certificate?

PKCS #12

Certificate revocation occurs during which stage of certificate management?

Cancellation

___ describes the condition where a certificate is moved to an invalid or untrusted state before its original expiration date that cannot be reversed.

revoked

A ___ validates the unique identifying information and public key information submitted by a requester.

CA

Which encoding scheme for X.509 certificates supports Base64 and ASCII text formats?

PEM

Which common X.509 certificate file type supports formats used by the PEM and DER encoding schemes?

.cer

Certificate expiration occurs during which stage of certificate management?

Expiration

What will a certificate authority (CA) do just before issuing a digital certificate to a requesting entity?

CA will sign the certificate with its own private key

_____ is a public-key cryptography standard used for password-based encryption.

PKCS #5

___ describes the condition where a certificate is moved to an invalid or untrusted state prior to its original expiration date, that can be reversed following investigation resolution.

Hold