Correction 70-293 pratice test from ms press

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Well I've been cramming for the MCSE test since I have been out of work and I just ran across an incorrect answer from the Microsoft MCSE self-pace training kit for test 70-293 from Microsoft press (yes I did check the ms web site to look for this correction already). Ok let me know if I am wrong here but it really does look like a fubar.




(Question)

You are a security engineer for an insurance agency. The company transmits sensitive documents to one of its customers. You need to ensure that only the customer can decipher the documents. The Customer also needs to be assured that the documents were transmitted from your company. Your company already has a public key pair that can be used for encryption, decryption and signing.



Then it tells you to select from a list the steps that you should take so securely transmit a document to the customer.



(Available options)



Sign the documents using the private key of the customer.

Sign the document using the public key of the customer.

Encrypt the document using the private key of the customer.

Obtain a private key from the customer.

Encrypt the document using the private key of the company.

Encrypt the document using the public key of the company.

Sign the document using the public key of the company.

Obtain a public key pair from the customer.

Obtain a public key from the customer.

Encrypt the document using the public key of the customer.

Sign the document using the private key of the company.



(Their Answer)



Obtain a public key pair from the customer.

Encrypt the document using the public key of the customer.

Sign the document using the public key of the company.



(Their Explanation "which differes from their answer and which I believe to be correct")



You should first obtain a public key from the customer. The customer will need to generate this key along with a corresponding private key. The customer should generally give the public key to all users who need to encrypt and send the documents to the customer.



You should then encrypt the document with the customer's public key. Once the documents is encrypted, only the corresponding private key can be used to decrypt the document.



You should sign the document using the company's private key. This ensures that the documents have not been tampered with when the customer receives it. The customer will need to have your company's public key.




(Comments)

The differences are the answer states that you obtain a key pair and actually you just obtain a public key.



Next difference is they say you should use your companies public key to state that is it from you and then they say you should use your companies private key to ensure it is from you.



For anybody studying for this test it is easy to over look and I did the first 4 times I went over that question.

.

Relevant Pages

  • Re: RSACryptoServiceProvider decrypt with public key
    ... key/decrypt with the private key and encrypt with the private key/decrypt ... encrypt data and send it back to Alice. ... only she can decrypt Bob's data. ... see the public key and the encrypted data, but she could not decrypt Bob's ...
    (microsoft.public.dotnet.security)
  • Re: how to have a gpg public key?
    ... Having just a public key doesn't do you much good. ... You need both a private key and a public key; ... can encrypt and decrypt your messages and you are just ...
    (Debian-User)
  • Re: DECRYPT with PUBLIC key (how to?)
    ... values in my application which would be decoded with my own public key which ... This is a very stupid thing to think that you can encrypt with private ... Private key operations often uses CRT ... Signature schemes and Encryption schemes have completely different ...
    (microsoft.public.dotnet.security)
  • Re: private to public decrypt now working
    ... would have the private key, all vice presidents would have a public key. ... All vice's could encrypt and only president could decrypt. ...
    (microsoft.public.dotnet.security)
  • [OT] Re: Basic question about Public Private Key Pairs
    ... > and private keys allow me to decrypt, but vice versa is not possible (or ... a public key and a corresponding private key. ... You can encrypt something with each key; ...
    (microsoft.public.dotnet.security)