Chapter 4 Security Plus

1. multiple CAs that sign digital certificates
6. management of keys and digital certificates at scale
7. An certificate that uses an asterisk to cover multiple subdomains
8. The entity that is responsible for digital certificates
10. one master CA called the root
13. associate a user’s identity to a public key
15. confidence in or reliance on another person/entity
18. published set of rules that govern operation of a PKI
19. A process in which keys are managed by a third party
20. A protocol suite for securing Internet Protocol (IP) communications
21. securely distributing encryption keys between two parties
22. Tracing a certificate back to the highest level of a CA
23. An entity that is trusted by others
24. The common file types for storing X.509 certificates
25. A list of certificate serial numbers that have been revoked
26. an extension to X.509 that allows various values to be associated with a security certificate
27. Data that is encapsulated within a secure outer shell

2. replaces SSL
3. Encrypts only the payload preserves the original IP header
4. digitally sign a program
5. M of N
9. A method of controlling public keys
11. publicly accessible centralized directory of digital certificates
12. performs a real-time lookup of a certificate’s status
14. A request submitted to a Certificate Authority for an TLS/SSL certificate
16. Encrypts the entire IP packet and encapsulates it within a new IP packet
17. web servers send queries to the OCSP Responder