MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is a certificate chain in cybersecurity?
   a. A sequence of digital certificates that verifies the identity from an end user to a trusted root authority
   b. A collection of encrypted passwords
   c. A group of firewall settings
   d. A chained set of network cables
   Answer: aencryptionconsulting+2
2. Which certificate is at the top of the certificate chain hierarchy?
   a. Root Certificate Authority (CA)
   b. Server certificate
   c. Client certificate
   d. End-entity certificate
   Answer: aencryptionconsulting+1
3. What is the primary purpose of a certificate chain?
   a. To establish trust between a user and a certificate authority
   b. To store encryption keys
   c. To enable peer-to-peer file transfer
   d. To speed up network access
   Answer: athesslstore+1
4. What type of certificate sits between a root CA and the end-entity certificate in a chain?
   a. Intermediate certificate
   b. Backup certificate
   c. Master certificate
   d. Temporary certificate
   Answer: aencryptionconsulting+1
5. The process of linking certificates together to establish trust is called:
   a. Certificate chaining
   b. Certificate pooling
   c. Certificate binding
   d. Certificate tunneling
   Answer: alearn.microsoft+1
6. Which entity is responsible for signing the root certificate?
   a. The root CA itself
   b. An intermediate CA
   c. The end user
   d. The client device
   Answer: athesslstore+1
7. How does a browser verify if an SSL certificate should be trusted?
   a. It checks the certificate chain back to a known root CA
   b. It looks at the website’s color
   c. It asks for user approval each time
   d. It ignores the certificate
   Answer: akeyfactor+1
8. If a certificate chain cannot be traced to a trusted root, what happens?
   a. The browser displays a security warning
   b. The site loads normally
   c. The server grants access automatically
   d. The certificate is upgraded
   Answer: aencryptionconsulting+1
9. What does an intermediate CA do in a certificate chain?
   a. Acts as a bridge between the root CA and end-entity certificates
   b. Stores encrypted emails
   c. Encrypts network traffic only
   d. Assigns IP addresses
   Answer: aencryptionconsulting+1
10. Which certificate is issued to the end user, device, or server?
    a. End-entity certificate
    b. Root certificate
    c. API certificate
    d. Backup certificate
    Answer: athesslstore+1
11. Where are most root CA certificates stored for verification?
    a. In operating system or browser trust stores
    b. On local hardware devices
    c. In the cloud, only
    d. On personal flash drives
    Answer: aencryptionconsulting+1
12. If an intermediate CA in the chain is compromised, what is the risk?
    a. All certificates issued by it could be invalid or vulnerable
    b. Only the root CA is at risk
    c. No risk, as intermediates are not important
    d. End-entity certificate remains trusted
    Answer: aencryptionconsulting+1
13. What field in a digital certificate identifies the CA that issued it?
    a. Issuer field
    b. Subject field
    c. Key usage field
    d. Algorithm field
    Answer: alearn.microsoft+1
14. Which certificate in a chain is self-signed?
    a. Root certificate
    b. End-entity certificate
    c. Intermediate certificate
    d. Device certificate
    Answer: alearn.microsoft+2
15. What information does a certificate chain verify?
    a. The path from the certificate to a trusted authority
    b. Password strength
    c. Local network configuration
    d. System hardware specs
    Answer: akeyfactor+1
16. Who signs the end-entity certificate in a typical SSL chain?
    a. An intermediate CA
    b. The end user
    c. The root CA always directly
    d. The web browser
    Answer: athesslstore+1
17. What is a “trust anchor” in a certificate chain?
    a. The root certificate
    b. The server certificate
    c. The intermediate CA
    d. The site administrator’s key
    Answer: aencryptionconsulting+2
18. Which protocol commonly uses certificate chaining?
    a. HTTPS
    b. FTP
    c. SMTP without TLS
    d. Telnet
    Answer: aencryptionconsulting+1
19. What is “chain of trust” another name for?
    a. Certificate chaining
    b. Certificate hashing
    c. Certificate pinning
    d. Root delegation
    Answer: athesslstore+1
20. What happens if a browser is missing the root certificate for a website’s chain?
    a. The browser cannot verify the trust chain and issues a warning
    b. The site loads faster
    c. The browser generates a root certificate automatically
    d. No effect
    Answer: aencryptionconsulting+1
21. When a certificate is revoked, what happens to its trust in the chain?
    a. All certificates depending on it lose trust
    b. Only the root certificate is unaffected
    c. It remains valid until expiration
    d. It becomes a backup certificate
    Answer: akeyfactor+1
22. What does “certificate path validation” check for?
    a. Correct chain from end-entity to trusted root
    b. Password length
    c. Hardware drivers
    d. Browser version updates
    Answer: alearn.microsoft+1
23. What is a digital certificate’s “subject” field?
    a. The individual or device the certificate is issued to
    b. The CA who issued it
    c. The hash algorithm
    d. The expiration date only
    Answer: aencryptionconsulting+1
24. What would cause a “broken chain of trust” error?
    a. Missing or untrusted intermediate or root certificates
    b. An expired web browser
    c. Too much traffic to the server
    d. Hardware failure on client PC
    Answer: athesslstore+1
25. A certificate signed directly by the root CA is called:
    a. Directly-issued certificate
    b. Leaf certificate
    c. Intermediate certificate
    d. Extended certificate
    Answer: aencryptionconsulting+1
26. What makes root certificates especially important?
    a. They serve as the foundation for all trust in a PKI
    b. They store user passwords
    c. They create random encryption keys
    d. They synchronize time
    Answer: aencryptionconsulting+1
27. Which is NOT a type of certificate in a typical chain?
    a. Data certificate
    b. Root certificate
    c. Intermediate certificate
    d. End-entity certificate
    Answer: athesslstore+1
28. The “issuer” and “subject” fields match on which certificate?
    a. Root certificate
    b. Any expired certificate
    c. Backup certificate
    d. End-entity certificate
    Answer: alearn.microsoft+1
29. What is the main risk if an untrusted certificate is present in the chain?
    a. The chain cannot be trusted
    b. The website loads faster
    c. Encrypts data faster
    d. Issues new root certificates
    Answer: aencryptionconsulting+1
30. PKI stands for:
    a. Public Key Infrastructure
    b. Private Key Integration
    c. Public Knowledge Initiative
    d. Private Kernel Instruction
    Answer: athesslstore+1
31. Which certificate is most frequently distributed to clients during handshake?
    a. End-entity certificate
    b. Root certificate
    c. Backup certificate
    d. Self-signed certificate
    Answer: aencryptionconsulting+1
32. Which certificate is often pre-installed in browsers?
    a. Root certificate
    b. Intermediate certificate
    c. Client certificate
    d. Device certificate
    Answer: athesslstore+1
33. How do Certificate Authorities (CAs) ensure trust?
    a. By following strict security standards and audits
    b. By generating random passwords
    c. Through network address translation
    d. Only via user feedback
    Answer: aencryptionconsulting+1
34. What is the first step when validating a certificate chain?
    a. Start with the presented certificate (leaf) and follow issuers up to root
    b. Scan for viruses
    c. Clear browser cache
    d. Update the operating system
    Answer: alearn.microsoft+1
35. Which function is part of chain-building in Windows CryptoAPI?
    a. Automated creation and validation of certificate chains
    b. WiFi configuration
    c. File compression
    d. Executable patching
    Answer: alearn.microsoft
36. Which file may contain the entire certificate chain for distribution?
    a. PEM file bundle
    b. Log file
    c. Page file
    d. Encrypted vault file
    Answer: aknowledge.digicert+1
37. What reduces manual trust decisions for users?
    a. Pre-installed trusted root CAs by vendors
    b. Users creating their own root CAs
    c. Disabling all encryption
    d. Using telnet
    Answer: aknowledge.digicert+1
38. Which chain configuration is considered insecure?
    a. Chains involving untrusted or publicly distributed private keys
    b. Chains with valid, trusted roots
    c. Chains registered with auditors
    d. Chains using only self-signed roots for local use
    Answer: aencryptionconsulting+1
39. What does SSL/TLS stand for?
    a. Secure Sockets Layer / Transport Layer Security
    b. Secure Signature Log / Token Layer Script
    c. Strong Service Link / Test Layer Secure
    d. Super Security Layer / Trusted Layer System
    Answer: athesslstore
40. If a CA is compromised, what is often the required action?
    a. Revoke and reissue all certificates under that CA
    b. Ignore the breach
    c. Change browser themes
    d. Reboot the server
    Answer: aencryptionconsulting+1
41. Which step does NOT occur in certificate chain validation?
    a. Checking OS updates
    b. Checking expiration dates of each certificate
    c. Ensuring chain leads to trusted root
    d. Verifying each signature in the chain
    Answer: alearn.microsoft+1
42. A valid certificate chain must:
    a. All certificates in the path are valid and issued by the prior
    b. Start with browser certificate
    c. Only include root and server certificates
    d. Use outdated encryption
    Answer: alearn.microsoft+1
43. What’s one reason browsers require intermediate certificates?
    a. To create separation between root CA and end-entity, increasing security
    b. For storing passwords only
    c. To install plugins
    d. To reduce encryption overhead
    Answer: aencryptionconsulting+1
44. How do users know if a website’s certificate chain is valid?
    a. Browser shows a padlock or green bar
    b. The page background turns red
    c. The website address lengthens
    d. The browser beeps
    Answer: aencryptionconsulting+1
45. What can break the chain of trust?
    a. Missing or expired intermediate or root certificates
    b. High server load
    c. Too many users
    d. Multiple browser tabs
    Answer: aencryptionconsulting+1
46. What mechanism is used to check if a certificate has been revoked?
    a. Certificate Revocation List (CRL) or Online Certificate Status Protocol (OCSP)
    b. URL hashing
    c. Session cookies
    d. IP blacklisting
    Answer: aencryptionconsulting+1
47. Where do browsers typically get their initial root certificates?
    a. Pre-installed by browser or OS vendors
    b. Alerted from the server each time
    c. Requested via email
    d. Downloaded from any website
    Answer: athesslstore+1
48. In a three-tier chain, what are the three certificates called?
    a. Root, intermediate, end-entity
    b. Client, server, device
    c. Backup, root, local
    d. Client, backup, host
    Answer: aencryptionconsulting+1
49. If an attacker manages to sign a certificate with a trusted root CA’s private key, what is compromised?
    a. Trust in the entire root CA and its subordinate certificates
    b. Only the server affected
    c. Just the intermediate certificate
    d. Nothing if it’s not public
    Answer: aencryptionconsulting+1
50. Why must the issuer of each certificate match the subject of the next certificate in the chain?
    a. To maintain a continuous path of trust back to the root
    b. So browsers load faster
    c. To reduce DNS lookups
    d. To increase loading animations
    Answer: alearn.microsoft+1

1. https://www.encryptionconsulting.com/certificates-and-certificate-chaining/
2. https://www.encryptionconsulting.com/what-is-a-certificate-chain-of-trust-and-how-does-it-work/
3. https://learn.microsoft.com/en-us/windows/win32/seccrypto/certificate-chains
4. https://www.thesslstore.com/knowledgebase/ssl-support/explaining-the-chain-of-trust/
5. https://www.keyfactor.com/blog/certificate-chain-of-trust/
6. https://knowledge.digicert.com/solution/how-certificate-chains-work
7. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
8. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
9. https://www.sanfoundry.com/cyber-security-questions-answers-security-protocols-1/
10. https://www.interviewbit.com/cyber-security-mcq/
11. https://www.scribd.com/document/813211180/Chapter-4-MCQ
12. https://testbook.com/objective-questions/mcq-on-block-chain–5eea6a0d39140f30f369e30d
13. https://www.youtube.com/watch?v=lLw0dICMA_Y
14. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
15. https://my.f5.com/manage/s/article/K41280190
16. https://interviewkickstart.com/blogs/articles/cyber-security-mcqs-answers
17. https://www.https.in/blog/ssl-certificate-chain/
18. https://www.vinsys.com/blog/top-30-mcqs-ceh-exam-preparation
19. https://examradar.com/cyber-security-mcq-set-2/
20. https://sematext.com/glossary/certificate-chain/