Security Ch. 6 – Flashcards

Why is IPsec considered to be a transparent security protocol?​

In the SSH suite, the ____________________ command allows a user to log on to a remote computer.

A sensitive connection between a client and a web server uses what class of certificate?

Because of the limitations of a hierarchical trust model, what type of trust model is used for CAs on the Internet?

What protocol below supports two encryption modes: transport and tunnel?

Select below the term that is used to describe a trusted third-party agency that is responsible for issuing digital certificates:

What kind of certificate is typically used by an individual to secure e-mail transmissions?

When two individuals trust each other because of the trust that exists between the individuals and a separate entity, what type of trust has been established?

Digital certificates cannot be used to identify objects other than users.

​Select below the secure alternative to the telnet protocol:

____________________ may be defined as confidence in or reliance on another person or entity.

What is the name for an organization that receives, authenticates, and processes certificate revocation requests?

​A framework for managing all of the entities involved in creating, storing, distributing, and revoking digital certificates

A trusted third-party agency that is responsible for issuing digital certificates​

​A trust model with one CA that acts as a facilitator to interconnect all other CAs

A technology used to associate a user's identity to a public key, in which the user's public key is digitally signed by trusted third party.​

​A trust model in which two individuals trust each other because each individually trusts a third party.

The type of trust relationship that can exist between individuals or entities.​

A publicly accessible centralized directory of digital certificates that can be used to view the status of a digital certificate​

A process in which keys are managed by a third party, such as a trusted CA​

​Symmetric keys to encrypt and decrypt information exchanged during a handshake session between a web browser and web server

​A trust model that has multiple CAs that sign digital certificates

What cryptographic transport algorithm is considered to be significantly more secure than SSL?

Key ____________________ dates prevent an attacker who may have stolen a private key from being able to decrypt messages for an indefinite period of time.

Public keys can be stored by embedding them within digital certificates, while private keys can be stored on the user's local system.

What protocol, developed by Netscape in 1994, is designed to create an encrypted data path between a client and server that could be used on any platform or operating system?

​SSL and TLS keys of what length are generally considered to be strong?

In the SSH suite, the ____________________ command allows a user to copy files between remote computers.

A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.

A framework for all of the entities involved in digital certificates for digital certificate management is known as:

Digital signatures actually only show that the public key labeled as belonging to the person was used to encrypt the digital signature.

A document that describes in detail how a CA uses and manages certificates, as well as how end users register for a digital certificate, is known as?

The Authentication Header (AH) protocol is a part of what encryption protocol suite below?​

The Encapsulating Security Payload (ESP) protocol ensures IPsec's confidentiality.​

At what stage can a certificate no longer be used for any type of authentication?

Select below the type of certificate that is often issued from a server to a client, with the purpose of ensuring the authenticity of the server:

What type of trust model has a single CA that acts as a facilitator to interconnect all other CAs?

Using what mechanism below can the non-repudiation of an e-mail and it's content be enforced?

What type of cryptographic algorithm can be used to ensure the integrity of a file's contents?

The vulnerability discovered in IPsec in early 2014 was nicknamed Heartbleed, due to an issue with a heartbeat extension in the protocol.

The process by which keys are managed by a third party, such as a trusted CA, is known as?