MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Public key encryption/decryption is not preferred because
   a. it is slow
   b. it is hardware/software intensive
   c. it has a high computational load
   d. all of the mentioned
   Answer: d. all of the mentionedsanfoundry​
2. Which one of the following is not a public key distribution means?
   a. Public-Key Certificates
   b. Hashing Certificates
   c. Publicly available directories
   d. Public-Key authority
   Answer: b. Hashing Certificatessanfoundry​
3. What does PGP stand for?
   a. Permuted Gap Permission
   b. Permuted Great Privacy
   c. Pretty Good Privacy
   d. None of the above
   Answer: c. Pretty Good Privacysanfoundry​
4. PGP uses which cryptographic algorithm?
   a. DES
   b. AES
   c. RSA
   d. Rabin
   Answer: c. RSAsanfoundry​
5. USENET is related to which public key distribution scheme?
   a. Public-Key Certificates
   b. Public announcements
   c. Publicly available directories
   d. Public-Key authority
   Answer: b. Public announcementssanfoundry​
6. Which of the following public key distribution systems is most secure?
   a. Public-Key Certificates
   b. Public announcements
   c. Publicly available directories
   d. Public-Key authority
   Answer: a. Public-Key Certificatessanfoundry​
7. Which systems use timestamps?
   a. i) and ii)
   b. iii) and iv)
   c. i) and iv)
   d. iv) only
   Answer: c. i) and iv)sanfoundry​
8. Which systems use timestamps as an expiration date?
   a. Public-Key Certificates
   b. Public announcements
   c. Publicly available directories
   d. Public-Key authority
   Answer: a. Public-Key Certificatessanfoundry​
9. Which system uses a trusted third party interface?
   a. Public-Key Certificates
   b. Public announcements
   c. Publicly available directories
   d. Public-Key authority
   Answer: a. Public-Key Certificatessanfoundry​
10. Publicly available directory is more secure than which other system?
    a. Public-Key Certificates
    b. Public announcements
    c. Public-Key authority
    d. None of the mentioned
    Answer: b. Public announcementssanfoundry​
11. Which term refers to a hierarchical system for creating, managing, and revoking digital certificates?
    a. Web of Trust
    b. PKI
    c. IaaS
    d. CA
    Answer: b. PKIsanfoundry​
12. What is a trusted third party that issues digital certificates?
    a. IKE
    b. CA
    c. PKI
    d. CSP
    Answer: b. CAsanfoundry​
13. Which format stores a binary representation of a certificate?
    a. PFX
    b. DER
    c. P7B
    d. PEM
    Answer: b. DERsanfoundry​
14. A certificate protecting multiple domains is called?
    a. EV certificate
    b. Wildcard certificate
    c. SAN certificate
    d. Root certificate
    Answer: c. SAN certificatesanfoundry​
15. A certificate for multiple subdomains is known as?
    a. Root certificate
    b. SAN certificate
    c. EV certificate
    d. Wildcard certificate
    Answer: d. Wildcard certificatesanfoundry​
16. Certificate chaining verifies the authenticity of a certificate by checking each certificate in the chain. True or False?
    Answer: Truesanfoundry​
17. Copies of lost private keys retrieved by recovery agents from escrow is True or False?
    Answer: Truesanfoundry​
18. A trusted third-party for backing up cryptographic keys is called?
    a. Key escrow
    b. TPM
    c. Recovery agent
    d. CA
    Answer: a. Key escrowsanfoundry​
19. Which are examples of PKI trusted models?
    a. Single CA model
    b. Hierarchical model
    c. Mesh model
    d. Web of trust
    Answer: a, b, c, dsanfoundry​
20. What mechanism allows HTTPS sites to resist impersonation?
    a. UTM
    b. HPKP
    c. DEP
    d. WAF
    Answer: b. HPKPsanfoundry​
21. Which component is responsible for issuing certificates?
    a. Registration Authority
    b. Certificate Authority
    c. Validation Server
    d. Cryptographic Module
    Answer: b. Certificate Authorityokta​
22. What does RA stand for in PKI?
    a. Registration Authority
    b. Root Authentication
    c. Revocation Administrator
    d. Random Access
    Answer: a. Registration Authorityokta​
23. What does a PKI certificate verify?
    a. Identity of sender
    b. File compression
    c. File hashing
    d. Password strength
    Answer: a. Identity of senderokta​
24. What is stored in the certificate database?
    a. User passwords
    b. Digital certificates and metadata
    c. Encryption keys only
    d. Private sharing information
    Answer: b. Digital certificates and metadataokta​
25. PKI ensures communication confidentiality using which key pair?
    a. Public and private key
    b. Random and static key
    c. Session and master key
    d. All of these
    Answer: a. Public and private keyokta​
26. The policy defining rules of PKI trustworthiness is
    a. Certificate Policy
    b. Privacy Policy
    c. Security Policy
    d. Encryption Policy
    Answer: a. Certificate Policyokta​
27. PKI provides encryption and
    a. Authentication
    b. Decryption only
    c. Error handling
    d. Logging
    Answer: a. Authenticationokta​
28. What algorithm does PGP recommend for encryption?
    a. RSA
    b. Blowfish
    c. RC4
    d. SHA-1
    Answer: a. RSAsanfoundry​
29. What is the primary purpose of a digital certificate?
    a. Verify identity
    b. Store passwords
    c. Encrypt data only
    d. Create keys
    Answer: a. Verify identityokta​
30. Certificate Revocation List (CRL) is used to
    a. List revoked certificates
    b. Generate private keys
    c. Manage RA requests
    d. Perform hashing
    Answer: a. List revoked certificatesokta​
31. Which model has multiple cross-certifying CAs?
    a. Web of trust
    b. Hierarchical model
    c. Mesh model
    d. Single CA model
    Answer: c. Mesh modelsanfoundry​
32. Which PKI component authenticates RA?
    a. Root CA
    b. Domain Controller
    c. Local Authority
    d. Validator
    Answer: a. Root CAokta​
33. A PKI certificate uses which data structure?
    a. X.509
    b. SSL 2.0
    c. Hash string
    d. MD5
    Answer: a. X.509sanfoundry​
34. Which standard defines certificate structure?
    a. X.509
    b. HIPAA
    c. RFC 6838
    d. ISO 17799
    Answer: a. X.509sanfoundry​
35. A revoked certificate is placed in
    a. CRL
    b. CSR
    c. VPN
    d. DNS
    Answer: a. CRLokta​
36. What does CSR stand for?
    a. Certificate Signing Request
    b. Certificate Security Record
    c. Central Security Repository
    d. Cryptographic Signature Requirement
    Answer: a. Certificate Signing Requestokta​
37. Which authority verifies requester identity before certificate issuance?
    a. Registration Authority
    b. Issuing Authority
    c. Network Authority
    d. Escrow Authority
    Answer: a. Registration Authorityokta​
38. In PKI, non-repudiation is achieved using
    a. Digital signatures
    b. Hash functions
    c. Symmetric keys
    d. Firewalls
    Answer: a. Digital signaturesokta​
39. Which key is kept private in asymmetric encryption?
    a. Private key
    b. Public key
    c. Root key
    d. Intermediate key
    Answer: a. Private keygeeksforgeeks​
40. What is the main function of a CA?
    a. Verify and sign digital certificates
    b. Encrypt private data
    c. Distribute symmetric keys
    d. Manage firewall rules
    Answer: a. Verify and sign digital certificatesgeeksforgeeks​
41. What ensures a certificate cannot be altered after issuance?
    a. Digital signature
    b. Timestamp
    c. Encryption
    d. Firewall
    Answer: a. Digital signatureokta​
42. What component holds issued certificates securely?
    a. Certificate database
    b. Token Manager
    c. Security Hub
    d. DNS Server
    Answer: a. Certificate databaseokta​
43. PKI supports secure email using
    a. S/MIME
    b. FTP
    c. SMTP
    d. Telnet
    Answer: a. S/MIMEokta​
44. Which is used to request a certificate from a CA?
    a. CSR
    b. CRL
    c. X.509
    d. HTTP
    Answer: a. CSRokta​
45. Which key encrypts a message in asymmetric encryption?
    a. Receiver’s public key
    b. Sender’s private key
    c. Root CA key
    d. Intermediate key
    Answer: a. Receiver’s public keygeeksforgeeks​
46. A PKI root CA’s compromise affects
    a. All subordinate certificates
    b. No certificates
    c. Only one domain
    d. External sites only
    Answer: a. All subordinate certificatesgeeksforgeeks​
47. Which extension format does DER use?
    a. .der
    b. .pem
    c. .p12
    d. .cer
    Answer: a. .dersanfoundry​
48. What cryptographic mechanism ensures authenticity in PKI?
    a. Digital signature
    b. Hash function
    c. Compression
    d. VPN
    Answer: a. Digital signatureokta​
49. What PKI component applies trust rules and policies?
    a. Certificate Policy
    b. Privacy Framework
    c. Network Blueprint
    d. Management Guide
    Answer: a. Certificate Policyokta​
50. PKI enhances security by providing
    a. Confidentiality, integrity, authentication, non-repudiation
    b. Speed, availability, redundancy, scalability
    c. Compression, caching, hashing, routing
    d. Identification, duplication, encryption, decryption
    Answer: a. Confidentiality, integrity, authentication, non-repudiationokta​

1. https://www.sanfoundry.com/cryptography-questions-answers-public-key-xcertificates-i/
2. https://www.okta.com/identity-101/public-key-infrastructure/
3. https://www.geeksforgeeks.org/computer-networks/public-key-infrastructure/
4. https://letsfindcourse.com/blockchain-mcq/public-key-cryptography-mcq
5. https://wayground.com/admin/quiz/620de689145ebc001d96647a/public-key-infrastructure
6. https://testbook.com/question-answer/in-india-the-term-public-key-infrastructure–5fccdecf9380c84a917b55b6
7. https://www.simulationexams.com/SampleQuestions/comptia/security+-q1.htm
8. https://wayground.com/admin/quiz/5eaae207dad68f001be4922c/security-pki-quiz
9. https://www.scribd.com/document/351956373/MCQS-cs-707-Paper-solved
10. https://itexamanswers.net/8-8-2-module-8-public-key-cryptography-quiz-answers.html
11. https://study.com/academy/practice/quiz-worksheet-public-key-infrastructure.html
12. https://www.scribd.com/document/741084979/Quiz-Cryptography-and-the-Public-Key-Infrastructure-Attempt-review2
13. https://www.scribd.com/document/730363198/Quiz-Cryptography-and-the-Public-Key-Infrastructure-Attempt-review
14. https://www.sanfoundry.com/computer-networks-questions-answers-public-key-cryptography/
15. https://www.cliffsnotes.com/study-notes/24061414
16. https://www.scribd.com/document/462903393/Chapter-10-Quiz
17. https://tayarimcqs.com/security-cryptography-pki-mcqs/
18. https://www.studocu.com/row/document/makerere-university/computer-systems-and-network-security-questions/pki-qns-possible-questions-for-revision/46515816
19. https://www.whizlabs.com/blog/cybersecurity-certification-free-questions/
20. https://publickeyinfrastructurefourhundredquestions.examzify.com