Public Key Infrastructure (PKI) in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Public Key Infrastructure (PKI)?

PKI is a system that helps secure communication by using pairs of keys: a public key and a private key. It manages digital certificates and encryption to verify identities and protect data.

beginner

What are the two types of keys used in PKI?

PKI uses a public key, which can be shared openly, and a private key, which is kept secret. Together, they enable secure data exchange and digital signatures.

beginner

What is a digital certificate in PKI?

A digital certificate is like an electronic ID card. It proves that a public key belongs to a specific person or organization, issued by a trusted authority called a Certificate Authority (CA).

intermediate

What role does a Certificate Authority (CA) play in PKI?

A CA is a trusted organization that issues digital certificates. It verifies identities and ensures that public keys are linked to the right owners, helping others trust the communication.

intermediate

How does PKI help in secure communication?

PKI allows people to encrypt messages with a public key so only the private key owner can read them. It also supports digital signatures to confirm who sent a message and that it wasn’t changed.

What does PKI primarily manage?

A Digital certificates and encryption keys

B User passwords

C Firewall settings

D Network traffic

PKI manages digital certificates and encryption keys to secure communication.

Which key in PKI should be kept secret?

A Public key

B Neither key

C Both keys

D Private key

The private key must be kept secret to maintain security.

Who issues digital certificates in PKI?

A Internet Service Provider

B Certificate Authority

C End user

D Firewall

Certificate Authorities issue digital certificates after verifying identities.

What does a digital signature prove?

A The message is public

B The message is encrypted

C The sender’s identity and message integrity

D The message is deleted

Digital signatures confirm who sent the message and that it was not altered.

Which of these is NOT a function of PKI?

A Managing user passwords

B Encrypting data

C Issuing digital certificates

D Verifying identities

PKI does not manage user passwords; it focuses on encryption and certificates.

Explain how PKI uses public and private keys to secure communication.

Think about how one key locks the message and the other unlocks it.

Describe the role of a Certificate Authority in the PKI system.

Consider who acts like a trusted referee in the system.