PKI Training Advanced - Day 2

Front

What is the main purpose of PKI governance?

Back

To ensure compliance and manage trust through policies

Front

Which document defines what must be done in a PKI system?

Back

Certificate Policy (CP)

Front

Who verifies user identity before certificate issuance?

Back

RA Officer

Front

Which of the following best describes the CPS? It lists all certificates issued by the CA, It details how the CA implements the CP, It tracks financial spending of the PKI, It encrypts user data

Back

It details how the CA implements the CP

Front

In the rulebook vs playbook analogy, what does the CP represent?

Back

Rulebook

Front

Which role is responsible for daily secure operations and access control?

Back

Security Officer / PKI Manager

Front

What does the Policy Authority (PA) do?

Back

Defines and approves PKI policies

Front

What is the primary responsibility of the CA Administrator?

Back

Issuing and revoking certificates

Front

Which of the following is a reason for internal PKI audits?
Options:
To ensure encryption algorithms are unbreakable,
To create new CP documents,
To check compliance with CP/CPS,
To measure network bandwidth

Back

To check compliance with CP/CPS

Front

Why is separation of duties important in PKI roles?

Back

To prevent any single point of failure or misuse