Which of the following is defined as an Internet, IPsec, key-establishment protocol, partly based on OAKLEY,
that is intended for putting in place authenticated keying material for use with ISAKMP and for other security
associations?

Which of the following is defined as a key establishment protocol based on the Diffie-Hellman algorithm
proposed for IPsec but superseded by IKE?

Which of the following is an Internet IPsec protocol to negotiate, establish, modify, and delete security
associations, and to exchange key generation and authentication data, independent of the details of any
specific key generation technique, key establishment protocol, encryption algorithm, or authentication
mechanism?

The National Institute of Standards and Technology (NIST) standard pertaining to perimeter protection states
that critical areas should be illuminated up to?

What can be defined as a value computed with a cryptographic algorithm and appended to a data object in
such a way that any recipient of the data can use the signature to verify the data’s origin and integrity?

Which of the following would best define a digital envelope?

What enables users to validate each other’s certificate when they are certified under different certification
hierarchies?

Who vouches for the binding between the data items in a digital certificate?

What can be defined as a data structure that enumerates digital certificates that were issued to CAs but have
been invalidated by their issuer prior to when they were scheduled to expire?

What can be defined as a digital certificate that binds a set of descriptive data items, other than a public key,
either directly to a subject name or to the identifier of another certificate that is a public-key certificate?