Question

Difficulty: EasyPublic Key Infrastructure and Certificate Management

A web administrator is setting up a new internal server and needs to secure web traffic using HTTPS. The administrator generates a public-private key pair on the web server and packages the public key alongside organizational details into a request file to send to the enterprise Certificate Authority (CA). Which of the following is the administrator creating to submit to the CA?

  1. Certificate Signing Request (CSR)Answer
  2. B
    Certificate Revocation List (CRL)
  3. C
    Symmetric secret key
  4. D
    Digital signature hash

Answer

Certificate Signing Request (CSR)
The correct answer is the Certificate Signing Request (CSR). When requesting an X.509 certificate from a Certificate Authority, an administrator first generates a key pair and packages the public key along with server information into a CSR.

Step-by-Step Solution

1
Identify the artifact being generated to apply for a CA-signed digital certificate.
The server generates a key pair and formats the public key and server identification details into a standardized request file.
Certificate Authorities require this request file to validate identity before issuing a signed X.509 certificate.
2
Match the request file format to standard PKI terminology.
The file is a Certificate Signing Request (CSR).
A CSR is the standard format used to apply for an X.509 digital certificate from a CA.

Key Concept

Certificate Signing Request (CSR) workflow in PKI
Rate this question