70-216 - Moc 2153 - Pki - L1 - Introduction

Front 1

The two fundamental operations associated with public key cryptography include _ and _.

Back 1

encryption
authentication

Front 2

A key is a random string-such as a _, ASCII value, _, or phrase-that is used in conjunction with an _.

Back 2

number
word
algorithm

Front 3

For public key encryption, every user has a pair of _ related keys, including:

A _ key, which is kept confidential.
A _ key, which is freely given out to all potential correspondents.

Back 3

mathematically
private
public

Front 4

In a typical scenario, a sender uses the _ public key to encrypt a message. Only the recipient has the related _ key to decrypt the message. By making your _ key available, other people can send you encrypted data that can only be _ by using your _ key.

Back 4

recipient's
private
public
decrypted
private

Front 5

The fundamental property of public key encryption is that the encryption and decryption keys are _

Back 5

different

Front 6

Encryption with a public key is a _ function

Back 6

one-way

Front 7

When you encrypt a document with a public key, _ turns into _ text

Back 7

plaintext
cipher

Front 8

A decryption key, which is _ but not _ to the encryption key, is needed to turn the cipher text back into plaintext

Back 8

related
identical

Front 9

Public key authentication uses _ key cryptography to authenticate and verify the originator of _ data in e-mail, e-_, and other electronic transactions

Back 9

public
electronic
commerce

Front 10

Instead of using the _ _ key to decrypt a message, the sender's _ _ is used to authenticate and _ the sender of the message. A _ _ _ that uniquely _ the contents of the message is encrypted with the private key to create a digital signature. A digital signature _the role of the private and public keys.

Back 10

sender's private
public key
validate
string of characters
identifies
swaps

Front 11

A _ _ is a means for the originator of a message, file, or other digitally encoded information to _ his or her _ to the information. The signature itself is a _ _ _ appended to a digital document.

Back 11

digital signature
bind
identity
sequence of bits

Front 12

A digital signature uses an algorithm called a _ _ . _ algorithms are designed to guarantee that if a single byte changes, processing the document generates a completely _ _.

Back 12

hash algorithm
Hash
different hash

Front 13

When a hash is encrypted by using a _ _, any modification of the signed data _ the digital signature.

Back 13

public key
invalidates

Front 14

A certification authority (CA) is responsible for providing and assigning the keys for e_, d_n, and au_

Back 14

ncryption
ecryptio
thentication

Front 15

A CA distributes keys by issuing _, which contain the _ key and a set of attributes. A CA can issue certificates to a c_, a user _, or a _e

Back 15

certificates
public
omputer
account
servic

Front 16

Certificates are signed documents that match_ _ to other information, such as a name or an _ _

Back 16

public keys
e-mail address

Front 17

Certificates are signed by _ _ _ _

Back 17

CAs that issue certificates

Front 18

A CA's signature _ that the public key does indeed _ to the party that presents it.

Back 18

guarantees
belong

Front 19

A CA can be _ or _.

Back 19

external
internal

Front 20

Additionally every CA has a _ to confirm its own identity, issued by another _ _or by _.

Back 20

certificate
trusted CA
itself

Front 21

The process for issuing a certificate has four basic steps:

1) The CA accepts a _ _.

2) The CA _ the requester's information according to the _-_-_ requirements of the CA.

3) The CA uses its _ _ to apply its digital signature to the certificate.

4) The CA issues the certificate for use as a security credential within a _.

Back 21

certificate request
verifies
proof-of-identity
private key
PKI

Front 22

A CA is also responsible for _ certificates and for publishing a _. Revocation of a certificate _ the certificate as a trusted security credential before the _ of the certificate's validity period.

Back 22

revoking
Certificate Revocation List (CRL).
invalidates
expiration

Front 23

If a CA's certificate is revoked, then all certificates that the CA issued are _ _.

Back 23

all revoked

Front 24

A certificate hierarchy is a model of _ in which certification paths are created through the establishment of _/_ relationships between CAs

Back 24

trust
parent/child

Front 25

A root CA, sometimes called a _ _, is meant to be the most _ type of CA in an organization's PKI.

Back 25

root authority
trusted

Front 26

subordinate CA is a CA that has been certified by _ _ in your organization.

Back 26

another CA

Front 27

Major components of a PKI:

Certificate _.
A_ _
_-enabled a_

Back 27

Services
ctive Directory
PKI
pplications

Front 28

In addition, Windows 2000 PKI components use industry security protocols, including:
_
_
_

Back 28

SSL
IPSEC
TLS

Front 29

Server authentication. Uses certificates to _ servers to clients. _ is an example.

Back 29

authenticate
E-commerce

Front 30

Client authentication. Uses certificates to authenticate _ _ _. _ _functionality and smart card authentication are examples.

Back 30

clients to servers
Remote access

Front 31

Code signing. Uses certificates associated with key pairs to sign _ _.

Back 31

active content.

Front 32

Secure e-mail. Uses certificates associated with key pairs to sign _ _.

Back 32

e-mail messages

Front 33

EFS. Uses two certificates associated with key pairs. One certificate is for _ _ _ and one certificate is used for _ recovery.

Back 33

encryption and decryption
EFS

Front 34

IPSec. Uses certificates associated with key pairs to encrypt _ network traffic

Back 34

IP-based