Examkin

Soru

Zorluk: KolayPublic Key Infrastructure and Certificate Management

A system administrator is preparing to obtain a new TLS certificate for an internal server from the enterprise Certificate Authority (CA). Which of the following tasks must be completed on the server during the initial certificate request workflow? (Select TWO.)

  1. Generate a asymmetric key pair consisting of a private key and a public keyCevap
  2. Create a Certificate Signing Request (CSR) containing the server's public key and identity detailsCevap
  3. C
    Export the Root CA's private key and install it directly onto the server
  4. D
    Generate a shared symmetric key to embed directly into the X.509 certificate file
  5. E
    Configure a secure hash algorithm to encrypt all payload data without using asymmetric key pairs

Cevap

The server administrator must generate an asymmetric key pair on the server and create a Certificate Signing Request (CSR) containing the public key to send to the CA.
To obtain a signed digital certificate from a CA, the requesting server must first generate its own asymmetric key pair (private and public key) and then bundle the public key along with server identity attributes into a Certificate Signing Request (CSR) submitted to the CA.

Adım Adım Çözüm

1
Generate Key Pair
Creation of the server's private key and matching public key.
The server needs a private key for decryption/signing and a public key to distribute via the signed certificate.
2
Create Certificate Signing Request (CSR)
A formatted request file containing the public key and server identity attributes.
The CA requires the CSR to verify requested identity attributes and sign the public key to issue an X.509 certificate.

Anahtar Kavram

PKI Certificate Enrollment and CSR Generation Workflow
Bu soruyu puanla

Konular

Public Key Infrastructure and Certificate Management

Bu konudan daha fazla soru