Examkin

Question

Difficulty: EasyPublic Key Infrastructure and Certificate Management

A system administrator is preparing to obtain a new TLS certificate for an internal server from the enterprise Certificate Authority (CA). Which of the following tasks must be completed on the server during the initial certificate request workflow? (Select TWO.)

  1. Generate a asymmetric key pair consisting of a private key and a public keyAnswer
  2. Create a Certificate Signing Request (CSR) containing the server's public key and identity detailsAnswer
  3. C
    Export the Root CA's private key and install it directly onto the server
  4. D
    Generate a shared symmetric key to embed directly into the X.509 certificate file
  5. E
    Configure a secure hash algorithm to encrypt all payload data without using asymmetric key pairs

Answer

The server administrator must generate an asymmetric key pair on the server and create a Certificate Signing Request (CSR) containing the public key to send to the CA.
To obtain a signed digital certificate from a CA, the requesting server must first generate its own asymmetric key pair (private and public key) and then bundle the public key along with server identity attributes into a Certificate Signing Request (CSR) submitted to the CA.

Step-by-Step Solution

1
Generate Key Pair
Creation of the server's private key and matching public key.
The server needs a private key for decryption/signing and a public key to distribute via the signed certificate.
2
Create Certificate Signing Request (CSR)
A formatted request file containing the public key and server identity attributes.
The CA requires the CSR to verify requested identity attributes and sign the public key to issue an X.509 certificate.

Key Concept

PKI Certificate Enrollment and CSR Generation Workflow
Rate this question

Topics

Public Key Infrastructure and Certificate Management

More questions from this topic