A network security administrator is configuring digital certificate services and Multi-Factor Authentication (MFA) to secure management sessions on enterprise network infrastructure. Which of the following statements accurately describe digital certificate verification and MFA factor rules? (Select TWO.)
- The verifying client validates the Certificate Authority (CA) digital signature on a presented certificate by using the public key of the issuing CA.Cevap
- BA Certificate Signing Request (CSR) generated by an edge router embeds the root CA's private key to encrypt administrative TACACS+ authentication payloads.
- Effective Multi-Factor Authentication requires combining credentials from at least two distinct factor categories, such as a passphrase and a hardware OTP token.Cevap
- DEnabling a local password complexity policy automatically commits all user credentials directly into the device startup-config without explicit administrator command execution.
- ECertificate Revocation Lists (CRLs) require an explicit deny statement in a local IPv4 ACL to block connections from revoked certificate serial numbers.
Cevap
The correct statements are that certificate verification requires validating the CA's digital signature using the CA's public key, and that MFA requires combining credentials from at least two distinct authentication factor categories (such as a passphrase and an OTP token).
Verifying a digital certificate involves checking the issuing CA's signature using that CA's public key. For MFA, authentication requires at least two independent factor types (such as something you know combined with something you have).
Adım Adım Çözüm
Anahtar Kavram
PKI Certificate Verification and MFA Authentication Factor Requirements