Review Questions

Now it's time to check your knowledge. Answer the questions, and then check your answers, which can be found in the Solutions section at the end of the book:

1. What type of certificate does a CA have?
2. If you are going to use a CA internally, what type of CA should you choose?
3. If you want to carry out B2B activity with third-party companies or sell products on the web, what type of CA should you use?
4. Why should you take your CA offline when not in use?
5. What type of encryption does PKI use?
6. Who signs X509 certificates?
7. What can you use to prevent your CA from being compromised and fraudulent certificates from being issued?
8. If two entities want to set up a cross-certification, what must they set up first?
9. What type of trust model does PGP use?
10. How can you tell whether your certificate is valid?
11. If the CRL is going slowly, what should you implement?
12. Explain certificate stapling/OCSP stapling.
13. What is the process...