W10 Public Key Infrastructure and Data Security

What is the fundamental problem in public key cryptography?

• Bob cannot tell if the public key belongs to Alice.

• Alice cannot send her public key.

• The certificate cannot be verified.

• The private key is lost.

What is a Digital Certificate?

• A document certifying that a public key belongs to a specific identity.

• A type of encryption algorithm.

• A method to generate private keys.

• A software application for managing keys.

What does a Certificate Authority (CA) do?

• Verifies identities and binds them to public keys.

• Manages user passwords.

• Creates fake certificates.

• Generates private keys for users.

What is the purpose of a digital signature?

• To generate a public key.

• To create a certificate.

• To encrypt the message.

• To verify the authenticity of a message.

What is the X.509 standard used for?

• Managing user accounts.

• Creating encryption algorithms.

• Defining the format of public key certificates.

• Establishing network protocols.

What is a Man-in-the-Middle (MITM) attack?

• An attack where the attacker intercepts communication between two parties.

• An attack that generates fake certificates.

• An attack that encrypts data.

• An attack that targets only public keys.

How can MITM attacks be defeated using digital signatures?

• By ignoring the public key.

• By sending unencrypted messages.

• By verifying the certificate with a trusted party.

• By using only private keys.

What is the role of a trusted party in public key infrastructure?

• To verify identities and issue certificates.

• To generate random keys.

• To manage user accounts.

• To create encryption algorithms.

What happens if a CA's private key is compromised?

• No one can use certificates anymore.

• All certificates become valid.

• Attackers can sign certificates with arbitrary data.

• The CA will be shut down.

What is a Domain Validated Certificate (DV)?

• A certificate that requires extensive documentation.

• A certificate that verifies domain ownership.

• A certificate that is only for organizations.

• A certificate that is self-signed.