Examkin

Soru

Zorluk: OrtaPassword Security Policies, MFA, and Certificates

A network administrator is configuring Public Key Infrastructure (PKI) certificate services to secure administrative access and VPN connections on Cisco routers. Match each PKI component on the left with its correct operational description on the right.

  • Certificate Signing Request (CSR)A block of encoded text containing an entity's identity information and public key sent to an issuing body.
  • Certificate Revocation List (CRL)A periodically published, signed file containing serial numbers of certificates invalidated prior to their scheduled expiration.
  • Online Certificate Status Protocol (OCSP)A real-time HTTP protocol used by clients to check the revocation status of a single specific digital certificate.
  • Certificate Authority (CA)A trusted third-party entity that verifies identity data and issues digitally signed X.509 identity certificates.

Cevap

Certificate Signing Request (CSR) matches the encoded request block with the public key; Certificate Revocation List (CRL) matches the signed file containing serial numbers of invalidated certificates; Online Certificate Status Protocol (OCSP) matches the real-time HTTP status checking protocol; Certificate Authority (CA) matches the trusted entity issuing signed certificates.
Each PKI component aligns with its specific role in the lifecycle of digital certificates: the CSR is the request payload created by an endpoint containing its public key; the CA is the trusted authority issuing certificates; the CRL is a published list of revoked serial numbers; and OCSP is an HTTP-based real-time certificate revocation protocol.

Adım Adım Çözüm

1
Identify the creation and submission phase of PKI certificate enrollment.
The Certificate Signing Request (CSR) is the unsigned request file containing the public key and applicant identity details submitted to the CA.
Before a certificate can be issued, a key pair is generated locally and public details are placed in the CSR.
2
Identify the certificate issuing body.
The Certificate Authority (CA) is the trusted party that validates identity information and signs identity certificates using its private key.
The CA establishes trust by acting as the signing authority in the Public Key Infrastructure.
3
Distinguish between offline/periodic and online/real-time certificate revocation checks.
CRL refers to the periodically published file of revoked certificate serial numbers, while OCSP provides real-time revocation checking over HTTP.
CRLs require downloading full lists periodically, whereas OCSP queries the revocation status of individual certificates on demand.

Anahtar Kavram

Public Key Infrastructure (PKI) components and certificate validation mechanisms
Bu soruyu puanla

Konular

Password Security Policies, MFA, and Certificates

Bu konudan daha fazla soru