Question 1

________ is a process where authentication and permission will be passed on from one system to another, usually across multiple enterprises, reducing the number of authentications needed by the user.

Accepted Answer

The process described in the statement is known as federation. Federation allows a user to access resources from multiple systems without having to independently authenticate with each system. The user’s authentication and authorization information is passed from one system to another, reducing the number of times the user must enter login credentials. Integration refers to the process of combining different systems or applications into a unified whole. Registration refers to the process of providing personal information to create an account on a system. Synchronization refers to the process of keeping two or more systems or datasets consistent with each other.

Question 2

An integer value unique within the issuing CA that is unambiguously associated with the certificate is the ________.

Accepted Answer

The serial number is a unique value assigned by the CA that unambiguously identifies the certificate. It is used to track and manage the certificate throughout its lifecycle. The other options (A, B, C) are all important components of a certificate, but they do not serve the same purpose as the serial number in uniquely identifying it.

Question 3

The _________ is an optional bit string field used to identify uniquely the issuing CA in the event the X.500 name has been reused for different entities.

Accepted Answer

The answer of The _________ is an optional bit string...

Question 4

_______ is a minimal set of conventions for invoking code using XML over HTTP that enables applications to request services from one another with XML-based requests and receive responses as data formatted with XML.

Accepted Answer

SOAP (Simple Object Access Protocol) is a minimal set of conventions for invoking code using XML over HTTP as mentioned in the question. SAML (Security Assertion Markup Language) is used for exchanging authentication and authorization data between parties and not directly related to XML-based request/response. HTML (Hypertext Markup Language) is used for creating web pages and not directly related to XML-based request/response. WS-Security is a set of extensions to SOAP to apply security to SOAP messages and not directly related to XML-based request/response.

Question 5

The _______ consists of two dates: the first and last on which the certificate is valid.

Accepted Answer

The term "period of validity" refers to the dates during which the certificate is considered to be valid or active. Option A ("version") is not correct because a certificate version would refer to different iterations of the same certificate (e.g. version 1.0, 2.0, etc.), but would not necessarily relate to the validity period. Option C ("extension") is also not correct, as this refers to a prolongation of the certificate's validity beyond its initial expiry date. Option D ("unique identifier") is not correct as this would denote a specific identifying code or number associated with the certificate, but would not necessarily relate to its validity period.

Question 6

A _______ is a generic term used to denote any method for storing certificates and CRLs so that they can be retrieved by end entities.

Accepted Answer

A repository is used to store certificates and CRLs so that they can be retrieved by end entities such as clients and servers. This allows for secure communication between entities. RAs, registration, and CAs are all involved in issuing and managing certificates, but do not necessarily involve the storage and retrieval of certificates and CRLs.

Question 7

The focus of _________ is defining an identity for each user, associating attributes with the identity, and enforcing a means by which a user can verify identity.

Accepted Answer

The answer of The focus of _________ is defining an...

Question 8

_______ systems are automated methods of verifying or recognizing identity on the basis of some physiological or behavioral characteristic.

Accepted Answer

The answer of _______ systems are automated methods of verifying...

Question 9

An alternative to each server being required to confirm identities of clients who request service is to use an _______ that knows the passwords of all users and stores them in a centralized database.

Accepted Answer

The answer of An alternative to each server being required...

Question 10

A principal element of an identity management system is _______.

Accepted Answer

All of the above elements: workflow automation, delegated administration, and authentication are crucial components of an identity management system. Workflow automation helps in streamlining operations and ensuring consistency in the identity management process, while delegated administration facilitates the distribution of administrative tasks to different users or groups. Authentication provides secure access to the system and ensures that only authorized users can access specific resources or perform certain actions. Therefore, all three elements are essential for an effective identity management system.

Question 11

_______ is the process whereby a user first makes itself known to a CA prior to that CA issuing a certificate or certificates for that user.

Accepted Answer

Registration is the process where a user first makes itself known to a CA prior to that CA issuing a certificate or certificates for that user. This process involves providing personal information and fulfilling the necessary requirements to obtain a digital certificate. The other options, authorization is the process of granting or denying access to a resource, certification is the act of issuing a certificate, and initialization is the process of starting up a system or device.

Question 12

______ is the set of hardware, software, people, policies, and procedures needed to create, manage, store, distribute, and revoke digital certificates based on asymmetric cryptography.

Accepted Answer

The answer of ______ is the set of hardware, software,...

Question 13

In a generic identity management architecture a ________ is an identity holder.

Accepted Answer

The answer of In a generic identity management architecture a...

Question 14

_____ is a markup language that uses sets of embedded tags or labels to characterize text elements within a document so as to indicate their appearance, function, meaning, or context.

Accepted Answer

XML (eXtensible Markup Language) is a markup language that uses tags to define elements within a document, allowing for the categorization of text elements and their relationships to each other. It is widely used for data storage and exchange on the internet. HML (Hypermedia Markup Language) and SOAP (Simple Object Access Protocol) are other markup languages, but they serve different purposes than XML. HTTP (Hypertext Transfer Protocol) is a communications protocol used for transmitting data over the internet but is not a markup language.

Question 15

A software utility initially developed at MIT and available both in the public domain and in commercially supported versions, ________ is the defacto standard for remote authentication.

Accepted Answer

The answer of A software utility initially developed at MIT...

Question 16

The certification _________ is the issuer of certificates and certificate revocation lists.

Accepted Answer

The answer of The certification _________ is the issuer of...

Question 17

________ allows end entities to restore their encryption/decryption key pair from an authorized key backup facility.

Accepted Answer

The answer of ________ allows end entities to restore their...

Question 18

_______ is the process in which a CA issues a certificate for a user's public key and returns that certificate to the user's client system and/or posts that certificate in a repository.

Accepted Answer

This process is called certification, which involves the issuance of a certificate by a CA for a user's public key. The certificate is then returned to the user's client system or posted in a repository. Registration refers to the process of providing information to a system or service, initialization refers to the process of setting up or configuring a system, and authorization refers to the process of granting access to resources or functionality.

Question 19

_______ is movement of data in a business process.

Accepted Answer

Workflow automation involves the movement of data within a business process, automating tasks and steps to improve efficiency and productivity. Provisioning refers to providing access rights and permissions to resources, revocation refers to removing access rights, and initialization refers to setting up or starting a process.

Question 20

A full-service Kerberos environment consisting of a Kerberos server that has the user ID and password of all participating users in its database and shares a secret key with each server, all users and servers being registered with the Kerberos server, is referred to as a Kerberos ______.

Accepted Answer

The answer of A full-service Kerberos environment consisting of a...

Quiz 23: Internet Authentication Applications