MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What does certificate revocation refer to in cybersecurity?
a. Terminating a user’s network access
b. Invalidating a certificate before expiration
c. Generating a new digital certificate
d. Deleting all expired certificates
Answer: bencryptionconsulting
Which of the following best explains why certificates are revoked?
a. Because they have expired
b. Because they no longer serve any organization purpose
c. Because they are compromised or untrusted
d. Because encryption algorithms changed
Answer: cencryptionconsulting
Which entity maintains the Certificate Revocation List (CRL)?
a. Certificate Authority (CA)
b. End user
c. Network administrator
d. Web browser
Answer: aemudhra
CRL stands for what?
a. Certificate Removal Log
b. Certificate Registration List
c. Certificate Revocation List
d. Cryptographic Regulation List
Answer: csanfoundry
What does the CA add to a CRL to indicate why a certificate was revoked?
a. Revocation code
b. Certificate hash
c. Key serial number
d. Signature ID
Answer: aemudhra
The “Key Compromise” revocation reason code implies that:
a. The private key was compromised
b. The certificate extension expired
c. The public key changed
d. The CA system malfunctioned
Answer: aemudhra
Which revocation code indicates that the issuing CA’s private key is compromised?
a. Affiliation Changed
b. CA Compromise
c. Superseded
d. Cessation of Operation
Answer: bemudhra
What revocation code indicates an organization has ceased operations?
a. Key Compromise
b. Superseded
c. Cessation of Operation
d. Affiliation Changed
Answer: cemudhra
When is a certificate considered “Revoked”?
a. When it is flagged as permanently invalid
b. When its expiration period renews
c. When it’s temporarily held
d. When updated keys are issued
Answer: awikipedia
A certificate temporarily placed in a non-active state is on:
a. Hold status
b. Revoked status
c. Deleted status
d. Pending renewal status
Answer: awikipedia
Which revocation method provides near real-time certificate status?
a. CRL
b. OCSP
c. SHA verification
d. MD5 checking
Answer: bemudhra
OCSP stands for what?
a. Online Certificate Status Protocol
b. Open Certificate Security Process
c. Operational Certificate System Protocol
d. Original Certificate Security Policy
Answer: afortinet
Which of the following methods uses downloadable lists of revoked certificates?
a. OCSP
b. CRL
c. Keychain Trust
d. PKI Validation
Answer: bemudhra
Why is CRL considered less efficient than OCSP?
a. CRLs require retrieving an entire list
b. OCSP lacks encryption support
c. CRLs support only one certificate at a time
d. OCSP cannot detect expired certificates
Answer: aemudhra
What is the purpose of OCSP Stapling?
a. To provide CRL with faster updates
b. To reduce CA server load by embedding a signed status response
c. To revoke expired certificates automatically
d. To renew expired certificates
Answer: bemudhra
What RFC standard defines certificate revocation processes?
a. RFC 2459
b. RFC 5280
c. RFC 3912
d. RFC 7519
Answer: bemudhra
Which statement about CRLs is correct?
a. They are unsigned text files
b. They contain serial numbers of revoked certificates
c. They only list expired certificates
d. They are created by users
Answer: bssojet
In CRLs, each revoked certificate entry includes what?
a. Serial number and revocation date
b. IP address and encryption key
c. MAC address and algorithm ID
d. Browser type and signature ID
Answer: assojet
Which of the following is a limitation of CRLs?
a. Real-time validation
b. Bandwidth overhead
c. Privacy improvement
d. Partial trust delegation
Answer: bssojet
A CA revokes a certificate when the subject’s private key is stolen. This represents which reason code?
a. Key Compromise
b. Unspecified
c. Superseded
d. Policy Violation
Answer: aemudhra
What typically happens after a certificate is revoked?
a. It’s added to a CRL or OCSP record
b. It automatically expires
c. It regenerates itself
d. It remains active until renewal
Answer: aencryptionconsulting
Which organization requires publicly trusted CAs to issue CRLs?
a. CA/Browser Forum
b. IETF
c. NIST
d. ISO
Answer: awikipedia
What is the main difference between “revoked” and “hold” states?
a. Hold is temporary, revoked is permanent
b. Hold is permanent, revoked is temporary
c. Both are permanent
d. Both are temporary
Answer: awikipedia
Why is certificate revocation critical in PKI?
a. To ensure trust in digital identities
b. To accelerate encryption
c. To store DNS keys
d. To minimize data redundancy
Answer: aencryptionconsulting
How often are CRLs typically updated?
a. Periodically by the CA
b. Every user session
c. Only annually
d. Only on certificate renewal
Answer: aemudhra
A revoked certificate cannot:
a. Be used to establish a secure connection
b. Be published in public directories
c. Contain metadata
d. Display certificate chain
Answer: aencryptionconsulting
An organization changing its business affiliation triggers which revocation code?
a. Affiliation Changed
b. Key Compromise
c. Cessation of Operation
d. Superseded
Answer: aemudhra
Which CA component verifies revocation status in real-time?
a. OCSP Responder
b. Trust Anchor
c. CRL Distribution Point
d. Public Directory
Answer: aemudhra
What is the goal of CRLite by Mozilla?
a. Faster revocation checks using compressed CRL data
b. Encrypt all certificates
c. Remove OCSP support
d. Extend certificate validity
Answer: aoxyplug
Which factor can cause mass revocations?
a. CA errors or vulnerabilities
b. End-user network failure
c. Device memory shortage
d. DNS propagation
Answer: assojet
When a revoked certificate is reissued with updated info, the event is identified as:
a. Superseded
b. Restored
c. Compromised
d. Expired
Answer: aemudhra
What type of digital document is a CRL?
a. Digitally signed list
b. Unsigned plaintext
c. Compressed binary
d. Encrypted blob
Answer: assojet
The revocation reason code “Unspecified” means:
a. Reason not recorded or undefined
b. Key compromise detected
c. Certificate expired
d. Organization ceased
Answer: aemudhra
What role do browsers play in revocation checking?
a. Query CRL / OCSP servers
b. Revoke keys manually
c. Regulate CAs
d. Modify serial numbers
Answer: awikipedia
Why might OCSP raise privacy concerns?
a. Reveals which sites users visit during queries
b. Stores credentials locally
c. Shares keys with third parties
d. Sends username in clear text
Answer: aemudhra
What component of PKI relies on revocation to prevent misuse?
a. Trust verification mechanism
b. Compression system
c. Key escrow database
d. Archive server
Answer: aencryptionconsulting
Which of these technologies combines OCSP results with certificates?
a. OCSP Stapling
b. Key escrowing
c. CRL chaining
d. SSL delegation
Answer: aemudhra
Which factor makes CRLs bandwidth-heavy?
a. Large cumulative lists
b. Lack of compression
c. Binary encoding
d. Slow responses
Answer: assojet
What ensures that revoked certificates are no longer trusted by clients?
a. Periodic CRL/OCSP updates
b. Client restarts
c. Encryption re-signing
d. Certificate path renewal
Answer: aemudhra
What is the purpose of the CRL Distribution Point in a certificate?
a. It tells where to check revocation info
b. It stores new keys
c. It validates domain emails
d. It verifies algorithms
Answer: assojet
What is a common challenge with CRL-based validation?
a. Delayed update times
b. Unauthorized access
c. Missing revocation codes
d. Duplicate signing
Answer: assojet
A certificate issued incorrectly should be:
a. Revoked immediately
b. Revalidated manually
c. Archived permanently
d. Extended automatically
Answer: awikipedia
In OCSP, who usually signs the response verifying the certificate status?
a. CA or delegated responder
b. Client application
c. Domain registrar
d. System administrator
Answer: afortinet
The status returned by OCSP that means valid certificate is:
a. Good
b. Revoked
c. Unknown
d. Hold
Answer: afortinet
Which is more bandwidth-efficient: CRL or OCSP?
a. OCSP
b. CRL
c. Both same
d. Depends on the session
Answer: aemudhra
The CRL revocation reason “Superseded” implies what?
a. A new certificate replaces the old one
b. The key was stolen
c. Identity invalid
d. Policy violation occurred
Answer: aemudhra
What is one reason browsers may prefer CRL over OCSP?
a. Reduced privacy concerns
b. Faster performance
c. Better encryption
d. Offline verification
Answer: awikipedia
How can revocation prevent phishing attacks?
a. By invalidating certificates of compromised domains
b. By encrypting URLs
c. By filtering malicious emails
d. By creating firewalls
Answer: aencryptionconsulting
What effect does invalid revocation data have?
a. It can cause users to trust compromised sites
b. It reduces encryption strength
c. It prevents SSL negotiation
d. It boosts connection speed
Answer: aemudhra
Which action should follow revocation of a certificate?
a. Replacement with a new valid certificate
b. Reuse of the same private key
c. Certificate deletion without notice
d. Ignoring status updates
Answer: aencryptionconsulting

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info