6 Network Security And Public Key Infrastructure

Cryptography · Unit 6 · 6 hrs

Network Security and Public Key Infrastructure

Exam-focused notes for Network Security and Public Key Infrastructure (Cryptography, CSC327): what the TU syllabus asks and how it has actually been tested, with 9 solved past questions from this unit.

What this unit covers

  • Overview of Network Security
  • Digital Certificates and X.509 certificates
  • Certificate Life Cycle Management
  • PKI trust models
  • PKIX
  • Email Security: Pretty Good Privacy (PGP)
  • Secure Socket Layer (SSL) and Transport Layer Security (TLS)
  • IP Security (IPSec)
  • Firewalls and their types

Firewalls and their types

20825 marks

List and explain the types of firewall. [5]

--- A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It establishes a barrier between a trusted internal network and untrusted external networks. --- - Operates a...

Full solved answer →
20815 marks

What is the use of firewall? How circuit level gateway differs from stateful inspection firewall? [5]

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Its main uses include: - Access Control: Blocks unauthorized access to the internal network while allowing legiti...

Full solved answer →
20765 marks

What is the task of a firewall? List the elements of X.509. [5]

--- A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Its primary tasks are: 1. Access Control: Permits or denies traffic between networks (e.g., trusted internal ...

Full solved answer →

Certificate Life Cycle Management

20825 marks

What is digital certificate? Discuss the certificate life cycle. [5]

A digital certificate is a certificate issued by a Certificate Authority (CA) to verify the identity of the certificate holder. The CA issues an encrypted digital certificate containing the applicant's public key along with a variety of other identification...

Full solved answer →
20805 marks

List the stage of certificate life cycle. What are the types of firewalls? [5]

--- A digital certificate (such as an X.509 certificate) issued by a Certificate Authority (CA) goes through the following stages during its life cycle: The entity (user, server, or organization) submits a request to the Certificate Authority (CA) along wit...

Full solved answer →

IP Security

20805 marks

Describe about IPSec. List the five services of PGP. [5]

IPSec is a suite of protocols designed to provide security at the network layer (IP layer) of the Internet. It provides security services for IP datagrams by authenticating and/or encrypting each IP packet in a communication session. IPSec operates in two m...

Full solved answer →

Email Security

20795 marks

Describe the services provided by Pretty Good Privacy protocol to secure email. [5]

Pretty Good Privacy (PGP) is an open-source, freely available software package designed for email security. It provides confidentiality and authentication services that can be used for electronic mail and file storage applications. PGP operates through 5 ma...

Full solved answer →

PKI trust models

20785 marks

Describe the PKI trust model. [5]

Public Key Infrastructure (PKI) is a framework that manages the creation, distribution, storage, and revocation of digital certificates. The PKI trust model defines how trust is established and maintained among entities using public key certificates. --- Th...

Full solved answer →

Secure Socket Layer

20785 marks

Define SSL protocol. Mention the services provided by PGP. [5]

--- Definition: SSL (Secure Sockets Layer) is a protocol designed to provide secure communication over the Internet between a client and a server. It operates between the application layer and the transport layer (TCP/IP) and ensures that data transmitted b...

Full solved answer →