Re: Correction 70-293 pratice test from ms press

Tech-Archive recommends: Fix windows errors by optimizing your registry

"Konoki" <Not@xxxxxxxx> wrote in message news:8F905C21-D4C2-4D20-9FD3-11AD3B09B830@xxxxxxxxxxxxxxxx
Well I've been cramming for the MCSE test since I have been out of work and I just ran across an incorrect answer from the Microsoft MCSE self-pace training kit for test 70-293 from Microsoft press

Welcome to the club!... There are those who have... and those who have not yet studied. :-)

(Question)

You are a security engineer for an insurance agency. The company transmits sensitive documents to one of its customers. You need to ensure that only the customer can decipher the documents. The Customer also needs to be assured that the documents were transmitted from your company. Your company already has a public key pair that can be used for encryption, decryption and signing.

Then it tells you to select from a list the steps that you should take so securely transmit a document to the customer.

You should first obtain a public key from the customer. The customer will need to generate this key along with a corresponding private key. The customer should generally give the public key to all users who need to encrypt and send the documents to the customer.

You should then encrypt the document with the customer's public key. Once the documents is encrypted, only the corresponding private key can be used to decrypt the document.

You should sign the document using the company's private key. This ensures that the documents have not been tampered with when the customer receives it. The customer will need to have your company's public key.

(Comments)

The differences are the answer states that you obtain a key pair and actually you just obtain a public key.

A valid semantical difference.

Next difference is they say you should use your companies public key to state that is it from you and then they say you should use your companies private key to ensure it is from you.


The explanation is actually correct, not the answer. You encrypt the document with the recipient's public key so that only the intended recipient (who possesses the only private key) can decrypt the document. You then sign the document (always!) with your private key so that ANYBODY can use your public key to verify that you're the sender of the message.


--
Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

.

Relevant Pages

  • Re: RSACryptoServiceProvider decrypt with public key
    ... key/decrypt with the private key and encrypt with the private key/decrypt ... encrypt data and send it back to Alice. ... only she can decrypt Bob's data. ... see the public key and the encrypted data, but she could not decrypt Bob's ...
    (microsoft.public.dotnet.security)
  • Re: how to have a gpg public key?
    ... Having just a public key doesn't do you much good. ... You need both a private key and a public key; ... can encrypt and decrypt your messages and you are just ...
    (Debian-User)
  • Re: DECRYPT with PUBLIC key (how to?)
    ... values in my application which would be decoded with my own public key which ... This is a very stupid thing to think that you can encrypt with private ... Private key operations often uses CRT ... Signature schemes and Encryption schemes have completely different ...
    (microsoft.public.dotnet.security)
  • Re: private to public decrypt now working
    ... would have the private key, all vice presidents would have a public key. ... All vice's could encrypt and only president could decrypt. ...
    (microsoft.public.dotnet.security)
  • [OT] Re: Basic question about Public Private Key Pairs
    ... > and private keys allow me to decrypt, but vice versa is not possible (or ... a public key and a corresponding private key. ... You can encrypt something with each key; ...
    (microsoft.public.dotnet.security)