050-V66-SERCMS02 Exam Questions

The use of an LDAP directory as a common database, shared by all instances of Certificate Manager, allows for the construction of certificate revocation lists (CRLs) in one locatio...

What is the minimum number of CAs needed to support four Juisdictions?

What extension profile should be used in RSA Certificate Manager when issuing end-entity certificates for secure e-mail?

What is required for installation of the RSA Key Recovery Manager (KRM)? (Choose two)

What is required to take advantage of High Availability with RSA Certificate Manager?

What should be done to prevent a prompt for SSL passphrases when starting the CM services?

What would be good reasons for dividing an organization into different Jurisdictions? (Choose two)

Certificate profiles are predefined sets of mandatory certificate extensions

Which protocol options does RSA Certificate Manager provide for third-party applications to check certificate status? (Choose two)

Which of the following components are required when implementing RSA OneStep? (Choose three)

Which directive is added to the xudad.conf file when scheduling automatic CRL generation?

What extension profile would be used when issuing certificates to routers to establish secure communications?

What is the legal document defining all aspects of how a Certificate Authority operates?

Distinguished Names (Choose two)

Can multiple Identity Sources be established from the same LDAP directory?

An RSA Authentication Manager deployment must have at least one Authentication Agent record in the database in order to

When a CA has been revoked, the browser will always show that certificates issued by that CA are invalid

What does the X.509 standard apply to?

An application may deem a certificate invalid if (Choose three)

What is the standard format for transporting certificates and private keys, as used with export and import functions?

When retrieving your certificate, you must ensure that

Where can the operation logs used for troubleshooting be found for RSA Certificate Manager and RSA Registration Manager?

During installation of the RSA Certificate Manager and the RSA Registration Managter, it is possible to change the default port configurations

If an organization is about to begin deployment of an RSA Certificate manager PKI, what should the organization do? (Choose two)

RSA Certificate Manager supports enrollment using which protocols? (Choose three)

Manually generated CRLs can be configured to include the next update in relative or absolute time

In order for an external application to take advantage of real-time status checking by directly connecting to the RSA Certificate Manager's Secure Directory Server, the application

If external users CANNOT access the RSA Certificate Manager directly, what can be used in the DMZ to obtain certificates?

If enrolling from a Jurisdiction with key recovery enabled, end users must first retrieve tncryption certificate before retrieving their authentication certificate

What is the default port number for the RSA Certificate Manager's Secure Directory Server?

Jurisdictions can be deleted by the RSA CM Administrator

What is the default port number for the Logging Server in the RSA Certificate Manager?

What are the benfits of installing an nCipher Hardware Security Module (HSM) in conjuinction with RSA Certificate Manager? (Choose three)

How does RSA Certificate Manager (RSA CM) make use of a mail server?

What must a vettor do as part of the certificate issuing process?

Which X.509 v3 extension can be used in a CA certificate to limit the number of subordinate CAs in a hierarchical CA model?

What binds a public key with an entity possessing the corresponding private key?

The X.509 v3 extension crIDistributionPoint is an information extension to provide the protocol and location of a CA's Certificate Revocation List

Which of the following is a true statement about the RSA Registration Manager (RSA RM)?

CRL signers can be deleted be the RSA CM Administrator

For more efficient administration of certificate management, an organization can be segmented into

An organization has a large number of certificates to deploy to end-entities in various locations around the world. They have poor network connections between their locations. What...

Administrators can configure certificate expiry notification on a per Jurisdiction basis

The best opportunity for interoperability between PKI-enabled applications comes from

In RSA Certificate Manager, which protocols can the crIDistributionPoint extension be configured to use? (Choose two)

In rsa Certificate Manager, which locations can an application retrieve a CRL from? (Choose three)

If two organizations are using RSA CAs, what is the easiest way for them to establish trust relationships?

Re-signing a CA allows you to change which of the following certificate configuration options? (Choose three)

A ingle RSA OneStep application can be enabled for multiple Jurisdictions

Which of the following best describes the differences in connecting to the Administrative and Enrollement Servers?