United States of America export laws include restrictions on cryptography. Identify the two methods with which these restrictions are accommodated in the Oracle Solaris 11 Cryptographic Framework.

Question

Options

• ACorporations must utilize signed X.509 v3 certificates.
• BA third-party provider object must be signed with a certificate issued by Oracle.
• CLoadable kernel software modules must register using the Cryptographic Framework SPI.
• DThird-party providers must utilize X.509 v3 certificates signed by trusted Root Certification Authorities.
• ESystems destined for embargoed countries utilize loadable kernel software modules that restrict encryption

• A
  3% (1)
• B
  92% (35)
• E
  5% (2)

Explanation

Oracle Solaris 11 accommodates US export restrictions on cryptography through two distinct provider pathways: user-space third-party providers must be signed with an Oracle-issued certificate (B), giving Oracle gatekeeping authority over which cryptographic implementations are legally distributable, while kernel-level providers must register through the Cryptographic Framework's Service Provider Interface, or SPI (C), ensuring regulated, auditable access to kernel crypto operations. Together, these two controls let Oracle enforce compliance at both the user-space and kernel-space layers.

Why the distractors are wrong:

• A is incorrect because X.509 v3 certificates for corporations is too generic and not a Solaris Cryptographic Framework mechanism.
• D is a subtle distractor - certificates are involved, but they must come specifically from Oracle, not from any trusted Root CA.
• E is fabricated; the framework does not use special restrictive modules for embargoed countries - export control happens through the signing/registration process, not destination-based module swapping.

Memory tip: Think of two doors into the Cryptographic Framework - the user-space door requires an Oracle-stamped key (signed certificate), and the kernel door requires registering at the SPI front desk. One above, one below - both controlled.

No community discussion yet for this question.