ccna book 1 final exam answers

ccna book 1 final exam answers.7.4 Public Key Cryptography 215To explain how to obtain a CA certificate, consider I, . And this example in.Step 1Alice and Bob request a CA certificate containing the CA's public key. Step 2 Once the CA certificates are received, each requesting system verifies the legitimacy of the certificates using public-key cryptography. Step 3Alice and Bob, after their systems have completed technical verification, do so by calling the CA administrator and verifying the public key and the certificate's serial number forFurther confirmation. The CA certificate is obtained in-band on the network, and the authentication is done out-of-band using a phone call.7.4.7.2 Step 2: Submit the certificate request to the CAAfter obtaining the CA certificate, Alice and Bob submit the certificate request to the CA. Step 1 Both systems forward a certificate request containing their public keys and some identity proof information. All this information is encrypted using the CA's public key. Step 2 After the CA server receives the certificate request, the CA administrator calls Alice and Bob to confirm their submission and public keys. The CA administrator issues the certificate by adding some additional information to the certificate request and digitally signing them all. Step 3 The certificate is obtained manually by the end user or automatically by SCEP and the certificate is installed on the system.7.4.7.3 Step 3: Certifying the endpointWith a certificate signed by the same CA installed, Bob and Alice now have to authenticate each other. Step 1 Bob and Alice exchange certificates. The CA is no longer involved. Step 2 Each party verifies the digital signature on the certificate by hashing the plaintext portion of the certificate, decrypting the digital signature using the CA's public key, and comparing the results. If the results match, the certificate is proven to be signed by a trusted third-party signature and the CA's confirmation of Bob and Alice's identities is accepted. The authentication does not require the involvement of the CA server, and the users exchange their certificates containing the public key.7.4.7.4 PKI SummaryAs a certification mechanism, PK1 has the following characteristics.