Review Questions

Now it's time to check your knowledge. Answer the questions, and then check your answers, which can be found in the Assessments section at the end of the book:

1. What type of certificate does a CA have?
2. If I am going to use a CA internally, what type of CA should I use?
3. If I want to carry out B2B activity with third-party companies or sell products on the web, what type of CA should I use?
4. Why would I make my CA offline when not in use?
5. Who builds the CA or intermediary authorities?
6. Who signs X509 certificates?
7. What can I use to prevent my CA from being compromised and fraudulent certificates being issued?
8. If two entities want to set up a cross-certification, what must they set up first?
9. What type of trust model does PGP use?
10. How can I tell whether my certificate is valid?
11. If the CRL is going slow, what should I implement?
12. Explain certificate stapling/OCSP stapling.
13. What is the process of obtaining a new certificate...