Certificate Authority Service in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of the Certificate Authority Service in cloud infrastructure?

It issues and manages digital certificates that help secure communication by verifying identities, like a trusted notary for websites and services.

beginner

How does a digital certificate help secure communication?

It proves the identity of a website or service and enables encrypted connections, so data stays private and safe from eavesdroppers.

intermediate

What is a root certificate in a Certificate Authority Service?

A root certificate is the top-level trusted certificate that signs other certificates, like the main stamp of approval in a chain of trust.

intermediate

Why is it important to rotate certificates regularly?

Rotating certificates reduces the risk of compromise by limiting how long a certificate is valid, similar to changing locks periodically for safety.

advanced

What role does the Certificate Authority Service play in a zero-trust security model?

It provides trusted certificates to verify every device and service continuously, ensuring only authorized entities communicate securely.

What does a Certificate Authority (CA) primarily do?

A Stores user passwords securely

B Monitors network traffic

C Issues and manages digital certificates

D Manages cloud storage buckets

A Certificate Authority issues and manages digital certificates that verify identities and enable secure communication.

Which certificate is at the top of the trust chain in a CA service?

A Intermediate certificate

B Client certificate

C Server certificate

D Root certificate

The root certificate is the top-level trusted certificate that signs other certificates in the chain.

Why should certificates be rotated regularly?

A To reduce risk of compromise

B To improve network speed

C To save storage space

D To increase certificate size

Regular rotation limits how long a certificate is valid, reducing the risk if it gets compromised.

In GCP, what is a common use of the Certificate Authority Service?

A Issuing SSL/TLS certificates for secure websites

B Configuring firewalls

C Creating databases

D Managing virtual machines

GCP's Certificate Authority Service is used to issue SSL/TLS certificates that secure websites and services.

What does a digital certificate contain?

A User passwords

B Public key and identity information

C Encrypted files

D Network logs

A digital certificate contains a public key and information about the identity it verifies.

Explain how a Certificate Authority Service helps secure communication in cloud environments.

Think about how websites prove they are safe to visit.

Describe the importance of certificate rotation and how it improves security.

Consider why you might change passwords or locks regularly.