CS6823 Network Security – Final – Spring 2015 (Complete And Verified Study material) (10pages) LEARNEXAMS

• Read each question carefully and answer all parts of the question. • Each answer must be explained. A correct answer without explanation on how the conclusion was obtained will receive no credit. • If you do not understand a question or are confused, do the best you can. • If you have the correct solution and also the incorrect solution in your answer, you will lose points. 1. PKI Alice, Bob, and Trudy are employees of ACME Corporation. Alice's PKI private certificate is generated on her laptop and never leaves the laptop. ACME Corporation has the ACME CA that digitally signs all the certificates. a. [3 pts] Explain how Alice would mutually authenticate an ACME server using her PKI certificates. b. [3 pts] How does ACME and Alice know that each other’s certificate is valid? c. [3 pts] If Alice used her PKI certificates for encrypted communications to Bob, would ACME be able to read the encrypted conversation? Explain. d. [3 pts] Trudy (who is evil) also worked at ACME corporation and has valid PKI certificates to authenticate into the ACME network. In what instances would Trudy be able to read the encrypted communication between Alice and Bob? Explain. 2. SSL/TLS