nerdexam
GIAC

GSLC · Question #564

Which of the following is used to authenticate asymmetric keys?

The correct answer is B. Digital signature. Digital signatures authenticate asymmetric keys by allowing a trusted certificate authority to cryptographically bind a public key to an identity, enabling any relying party to verify that key's authenticity.

Security Architecture & Engineering

Question

Which of the following is used to authenticate asymmetric keys?

Options

  • AMAC Address
  • BDigital signature
  • CDemilitarized zone (DMZ)
  • DPassword

How the community answered

(42 responses)
  • B
    93% (39)
  • C
    5% (2)
  • D
    2% (1)

Why each option

Digital signatures authenticate asymmetric keys by allowing a trusted certificate authority to cryptographically bind a public key to an identity, enabling any relying party to verify that key's authenticity.

AMAC Address

A MAC address is a Layer 2 hardware identifier for a network interface card and has no role in cryptographic key authentication or PKI.

BDigital signatureCorrect

In a PKI, a certificate authority uses its own private key to digitally sign a certificate that contains the subject's public key - any party holding the CA's public key can verify the signature, confirming the asymmetric key is authentic and has not been tampered with, which is the foundational mechanism for trusting public keys.

CDemilitarized zone (DMZ)

A DMZ is a network architecture concept used to isolate exposed services from the internal network; it is unrelated to authenticating cryptographic keys.

DPassword

Passwords are a shared-secret symmetric authentication method and cannot authenticate an asymmetric key pair, which requires a cryptographic binding mechanism such as a signed certificate.

Concept tested: Digital signatures authenticating asymmetric public keys in PKI

Source: https://csrc.nist.gov/publications/detail/fips/186/5/final

Topics

#asymmetric cryptography#digital signatures#PKI#key authentication

Community Discussion

No community discussion yet for this question.

Full GSLC Practice