US Army Public Key Infrastructure (PKI) Trusted Agent (TA) Training Practice Exam

These questions are part of the practice quiz. Start practicing

• What is an important aspect of using digital certificates in a secure environment?
• Are organizations allowed to appoint TAs based on their operational needs?
• When might a Trusted Agent need to revoke a digital certificate?
• An Enhanced Trusted Agent may ______.
• Which of the following responsibilities are associated with the ETA role?
• Is it necessary for a subscriber to keep their SIPRNet token after retirement?
• If a token is damaged and cannot be reset, who submits the revocation request?
• How many Trusted Agents are recommended to be at each location for continuity?
• Where must tokens be secured prior to being issued?
• What is the consequence of improperly handling PKI keys and tokens?
• Which item does NOT appear on a TA spreadsheet?
• What occurs when a subscriber shares their private signing key?
• What is the difference between a private key and a public key?
• Which of the following is a potential threat that a PKI system must defend against?
• What happens when a digital certificate is revoked?
• What is the primary role of key management in PKI?
• What is one responsibility that is NOT required of a Trusted Agent?
• Why is backing up PKI keys critical?
• When a user enrolls a Token, what must they do?
• In a PKI system, what does certificate validation ensure?
• What can Enhanced Trusted Agents authorize?
• How frequently should certificates be renewed in a PKI system?
• What is an Online Certificate Status Protocol (OCSP) primarily used for?
• Which component is essential for verifying the authenticity of a digital certificate?
• What is the minimum number of co-located TAs required at a duty station?
• Which of the following describes the digital signature of a Certificate Authority (CA)?
• Can an end user use an intermediary for authentication without prior approval from the RA/LRA?
• Who interacts directly with subscribers during the token issuance process?
• What is the role of a Trusted Agent regarding subscriber eligibility for a SIPRNet token?
• In what way does a Trusted Agent (TA) assist during incident responses in PKI?
• What does a Certificate Authority (CA) do?
• What type of operations does an HSM perform related to cryptography?
• What must a subscriber do with their token upon separation or retirement?
• Which of the following are common types of certificates issued in a PKI system?
• If a NSS token is inserted but no PIN is entered, what is the outcome?
• What does PKI stand for?
• What role does Secure Socket Layer (SSL) play in PKI?
• What is a primary benefit of SSL in secure communications?
• What must occur before a subscriber can be re-registered?
• What consequence may result from the improper handling of PKI keys and tokens?
• What does PKI stand for?
• What constitutes a key pair in PKI?
• What signifies an Enhanced Trusted Agent's capability to assist with certain LRA functions?
• If a Trusted Agent (TA) is terminated for cause, how is this situation treated regarding security?
• What is the role of a Trusted Agent (TA) in the US Army PKI?
• Must a PKI Trusted Agent successfully complete a training program provided by the Committee on National Security Systems (CNSS)?
• What access level do ETAs have regarding PKI components and software?
• If a NSS token is damaged and cannot be reset, who will the TA or ETA contact for a new token?
• What does the TA confirm during the subscriber verification process?
• If a SIPRNet token is inserted into an ASCL/NEATS or CAC reader, what is required?
• Enhanced Trusted Agents operate under guidelines established by which entity?
• Who issues digital certificates in a PKI system?
• What is a key reason for establishing Trusted Agents within the PKI framework?
• What does a certificate signing request (CSR) represent?
• If a TA cannot reset a NIPRNet ASCL with the unlock code, what should occur?
• What roles are included in the LRA operations staff?
• Is a Trusted Agent supporting an Army Organization required to complete training by the CNSS?
• What should a TA do to maintain the integrity of the PKI?
• What does "PKI policy" primarily govern?
• What is a potential penalty for disclosing PKI information to unauthorized persons?
• What does "two-factor authentication" require?
• What action is required if a user’s SIPRNet token is compromised?
• What type of data does a digital certificate typically contain?
• What is a potential risk of certificate expiration?
• Why are three TAs recommended at each duty station?
• What does the ETA do with a blank token once it requests a CRI from an RA or LRA?
• What security measures must a Trusted Agent enforce?
• Why is user education deemed essential in a PKI environment?
• Which responsibilities are associated with the role of the Trusted Agent?
• Which of the following does NOT directly relate to the role of a Trusted Agent?
• Which of the following can a TA submit?
• What must the TA's responsibilities not do?
• What is the primary purpose of PKI in the military?
• What does the process of key management include?
• What type of clearance does a Trusted Agent need?
• How long do digital certificates typically last?
• What action should be taken in the event of key mismanagement?
• Who is responsible for ensuring that the TA is notified of personnel changes?
• What are the main components of a PKI system?
• What can Trusted Agents not authorize?
• Why is it important to keep a Private Key secure?
• What is a cryptographic key?
• Does the TA have privileged access to PKI components/software?
• What does OCSP stand for in digital certificate management?
• What is the primary function of key escrow in a PKI context?
• What is one of the responsibilities a Trusted Agent may perform?
• What happens if a PIN is not correctly entered within a specified time limit?
• In centralized issuance, what happens before the subscriber signs the DD Form 2842?
• What can happen if a certificate is not properly managed?
• What security benefit does Public Key Cryptography provide?
• Who is responsible for protecting the tokens from unauthorized access?
• What is a necessary action if unauthorized persons gain access to PKI keys?
• Does the NSS Registration Workstation contain ActivClient middleware?
• What can users assume when they have an encrypted message?
• Is an ETA required to be a DOD employee?
• What is the focus of this learning module?
• What is a digital certificate?
• Will the subscriber meet in-person with the TA to receive their token?
• How do you verify the authenticity of a digital certificate?
• What can be considered a best practice when implementing PKI?
• What is the role of the Trusted Agent (TA) in the PKI process?
• Can the TA/ETA utilize the Token Management System (TMS) to reset a locked SIPRNet token's PIN?
• Who facilitates the identification and validation of individuals before a digital certificate is issued?
• Trusted Agents and Enhanced Trusted Agents must avoid duties that conflict with their responsibilities?
• What does an ETA verify as part of the TMS process when resetting locked PINs?
• What is the purpose of regular audits in PKI systems?
• What might happen if a Trusted Agent does not fulfill their responsibilities?
• What is a Registration Authority (RA) responsible for?
• Data integrity in a PKI context ensures what?
• Which of the following statements about the responsibilities of the Trusted Agent is true?
• What is the method by which an electronic signature validates the signer's identity?
• Which of the following statements is true regarding the handling of PKI keys?
• How should non-issued NSS tokens be protected from theft?
• What does it mean for a digital signature to be described as "non-repudiable"?
• In PKI, what does CA stand for?
• Who can a subscriber share their private signing key with?
• Are TAs required to monitor the usage of issued tokens?
• Should a subscriber's SIPRNet email address be included on the DD Form 2842 when requesting NIPR ASCL/NEATS tokens?
• Can an Enhanced Trusted Agent authorize certificate suspension or revocation requests?
• What is the purpose of the Enhanced Trusted Agent in the context of the PKI system?
• What is a Certificate Revocation List (CRL)?
• In case of a locked PIN, what does the ETA need to proceed with the reset?
• What is the minimum number of digits required for the NSS token PIN?
• What does the term "key compromise" imply in a PKI implementation?
• What is Public Key Cryptography primarily used for?
• What is a hardware security module (HSM)?
• What steps are involved in enrolling a user for a digital certificate?
• What happens if a SIPRNet token is inserted into an unclassified Card Reader with the PIN entered?
• Why is compliance with regulations critical in PKI?
• What task does the ETA perform when an individual seeks a SIPRNet token?
• Can organizations approve Enhanced Trusted Agents (ETAs) based on their operational needs?
• Besides verifying a subscriber's identity, what else does the LRA/TA verify?
• What is a main reason for in-person meetings between the subscriber and the TA?
• How can certificate revocation benefit PKI?
• Should a subscriber's SIPRNet email address be included on the DD Form 2842?
• Does re-registration occur before the initial registration?
• What action is NOT required when a trusted agent is notified of departing personnel?
• What is essential for an ETA when handling subscriber information?
• What is the main responsibility of a Trusted Agent in PKI?
• Which of the following is NOT a requirement of Enhanced Trusted Agent system?
• In what manner do Trusted Agents assist with certificate renewal?
• What does key management refer to in a PKI system?
• What happens when a subscriber cannot reset their PIN due to token damage?
• What is a primary responsibility of a Trusted Agent during the verification process?
• Is the statement "Enhanced Trusted Agents are responsible for the physical security of tokens" true or false?
• Is it necessary for the Nomination and Acknowledgement of Enhanced Trusted Agent (ETA) Responsibilities form to include the name and signature of an alternate ETA?
• What is a key element of successful PKI implementation?
• What attribute characterizes a public key in PKI?
• This is a CBT module that emphasizes training the Enhanced Trusted Agent.
• The TA/ETA must protect from theft, loss, or unauthorized access to which of the following?
• Which of the following describes one of the key benefits of PKI?
• Which responsibility does a Trusted Agent NOT have?
• What is the main purpose of an Enhanced Trusted Agent after notification of a broken token?
• What is the consequence of a TA ignoring security protocols?
• What must the TA protect from theft or unauthorized access?
• What is one duty of a Trusted Agent related to subscriber assistance?
• True or False: The TA needs to validate the subscriber's identity in person for token issuance.
• Can an ETA reset the PIN on a locked SIPRNet token?
• What protocol is commonly used for secure communications on the internet?
• How does a subscriber receive their token from the Enhanced Trusted Agent (ETA)?
• What does "chain of trust" refer to in PKI?
• What must commanders ensure regarding departing personnel and their SIPRNet tokens?
• What does compliance in PKI help to avoid?
• What data does the subscriber provide to lookup their S-DEERS information?
• Which statement best reflects the requirement for a subscriber's token management upon leaving the service?
• Which of the following statements is true regarding the role of a TA in token management?
• What must a Trusted Agent have besides a SECRET clearance?
• What does it mean if the TA interferes with their duties?
• Enhanced Trusted Agents must ensure tokens are regularly monitored for which purpose?
• Through which network does the TA send the spreadsheet for NSS token applicants?
• In terms of data security, what action is a subscriber expected to take with their private signing key?
• How can a CRI be sent to a NSS Subscriber when re-registering or re-issuing a NSS token?
• In order to reset SIPRNet token PINs, what must the TA have on their workstation?
• True or False: The TA is responsible for the initial data entry for token verification.
• What is the function of an electronic signature?
• What is the primary function of an Enhanced Trusted Agent?
• What information must a subscriber provide to the LRA to look up their S-DEERS information?
• What must a subscriber do with their token upon separation or retirement?
• Can the ETA or TA create a SIPRNet PIN Reset CRI without RA/LRA assistance?
• What could result from failure to protect the integrity of the PKI?
• Can an Enhanced Trusted Agent (ETA) perform some functions of a Local Registration Authority (LRA)?
• What role do Trusted Agents play in the PKI framework?
• In case of a breach of PKI protocols, what is one of the first steps to take?
• What does it signify if an ETA assists in completing the DD Form 2842?
• What is true regarding the SCM 90meter middleware?
• If a NSS token is inserted into an unclassified Card Reader without entering a PIN, what is the status?
• Which entity must approve TA appointment orders?
• What is typically true about the validity of certificates in a PKI?
• What primary duty is expected from Enhanced Trusted Agents regarding tokens?
• If a SIPRNet token is inserted into an unclassified Card Reader, what must the subscriber do?
• How quickly must Enhanced Trusted Agents replace a defective or inoperable token?
• If a Trusted Agent suspects that a certificate has been compromised, what should they do?
• What could happen to personnel who compromise Army information systems?
• What does user authentication confirm?
• Why is PKI essential for secure military communications?
• Is it true that tokens can ONLY be secured in a safe drawer prior to being created and issued?
• Can a Trusted Agent also serve as an Enhanced Trusted Agent?
• What is the main purpose of encryption in the context of PKI?
• What is the procedure if a NSS token is reported broken?
• How is trust achieved in a PKI system?
• What level of clearance is required for an Enhanced Trusted Agent?
• Can a TA manage more than one token?
• What must the Nomination and Acknowledgement of Trusted Agent (TA) Responsibilities form include?
• Which responsibilities are associated with the LRA role?
• Where would you find the identity source document requirements for customers without a CAC ID?
• What does the acronym TMS stand for?
• Does a TA need to be a DoD employee to fulfill their role?
• Who can a subscriber share their private signing key with?