CS2 L4 T2 Q1: Quiz
Time limit: 0
Quiz Summary
0 of 33 Questions completed
Questions:
Information
You have already completed the quiz before. Hence you can not start it again.
Quiz is loading…
You must sign in or sign up to start the quiz.
You must first complete the following:
Results
Quiz complete. Results are being recorded.
Results
0 of 33 Questions answered correctly
Your time:
Time has elapsed
You have reached 0 of 0 point(s), (0)
Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)
Categories
- Not categorized 0%
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- Current
- Review
- Answered
- Correct
- Incorrect
-
Question 1 of 33
1. Question
What does the abbreviation CRL stand for?
CorrectIncorrect -
Question 2 of 33
2. Question
True or False: An OCSP responder provides the status of all certificates in the form of a list.
CorrectIncorrect -
Question 3 of 33
3. Question
What is one challenge with OCSP responders?
CorrectIncorrect -
Question 4 of 33
4. Question
What does certificate pinning aim to prevent?
CorrectIncorrect -
Question 5 of 33
5. Question
True or False: HTTP Public Key Pinning (HPKP) is a popular and widely-used method of certificate pinning.
CorrectIncorrect -
Question 6 of 33
6. Question
What is the replacement mechanism for HPKP?
CorrectIncorrect -
Question 7 of 33
7. Question
Which of the following extensions is most commonly used for ASCII format files in Linux?
CorrectIncorrect -
Question 8 of 33
8. Question
True or False: A P7B format file can contain multiple certificates and the private key.
CorrectIncorrect -
Question 9 of 33
9. Question
What is the purpose of the PKCS #12 format?
CorrectIncorrect -
Question 10 of 33
10. Question
What command in OpenSSL is used to generate a self-signed root X.509 digital certificate?
CorrectIncorrect -
Question 11 of 33
11. Question
True or False: To generate a certificate signing request (CSR) in OpenSSL, you need to run the command on the CA server.
CorrectIncorrect -
Question 12 of 33
12. Question
Which of the following commands is used to convert a PEM-encoded certificate to a DER binary-encoded certificate?
CorrectIncorrect -
Question 13 of 33
13. Question
What is a common cause of certificate problems?
CorrectIncorrect -
Question 14 of 33
14. Question
True or False: When troubleshooting a new certificate, it’s not necessary to check if clients have been configured with the appropriate chain of trust.
CorrectIncorrect -
Question 15 of 33
15. Question
Which of the following should be checked when dealing with issues regarding a client rejecting a new certificate?
CorrectIncorrect -
Question 16 of 33
16. Question
What is the purpose of key recovery in certificate management?
CorrectIncorrect -
Question 17 of 33
17. Question
True or False: Key recovery involves archiving keys with a third party to enhance security.
CorrectIncorrect -
Question 18 of 33
18. Question
What does M-of-N control mean in the context of key management?
CorrectIncorrect -
Question 19 of 33
19. Question
How are certificate expiration dates typically set?
CorrectIncorrect -
Question 20 of 33
20. Question
True or False: Renewing a certificate involves generating a new key pair for encryption.
CorrectIncorrect -
Question 21 of 33
21. Question
What is the purpose of giving a certificate a “shelf-life”?
CorrectIncorrect -
Question 22 of 33
22. Question
What is the main function of an OCSP responder?
CorrectIncorrect -
Question 23 of 33
23. Question
True or False: OCSP responders are not resource-intensive and have no privacy concerns.
CorrectIncorrect -
Question 24 of 33
24. Question
How does OCSP stapling resolve the challenges of traditional OCSP responders?
CorrectIncorrect -
Question 25 of 33
25. Question
What does certificate pinning aim to prevent?
CorrectIncorrect -
Question 26 of 33
26. Question
True or False: HTTP Public Key Pinning (HPKP) is a popular and widely-used method of certificate pinning.
CorrectIncorrect -
Question 27 of 33
27. Question
What is the replacement mechanism for HPKP?
CorrectIncorrect -
Question 28 of 33
28. Question
Which file extension is commonly used for ASCII format files in Linux?
CorrectIncorrect -
Question 29 of 33
29. Question
True or False: The PKCS #12 format allows the export of the private key along with the certificate.
CorrectIncorrect -
Question 30 of 33
30. Question
What is the purpose of the P7B format?
CorrectIncorrect -
Question 31 of 33
31. Question
What is the purpose of setting up a root CA in OpenSSL?
CorrectIncorrect -
Question 32 of 33
32. Question
True or False: The openssl req command is used to generate a certificate signing request (CSR) on the web server.
CorrectIncorrect -
Question 33 of 33
33. Question
What command is used in OpenSSL to convert a PEM-encoded certificate to a DER binary-encoded certificate?
CorrectIncorrect