050-V66-SERCMS02 · Question #69
A self-signed CA is referred to as a
The correct answer is A. Root CA. See the full explanation below for the reasoning.
Question
A self-signed CA is referred to as a
Options
- ARoot CA
- BTrusted CA
- CCommercial CA
- DSubordinate CA
How the community answered
(44 responses)- A70% (31)
- B18% (8)
- C5% (2)
- D7% (3)
Community Discussion
4A is right. A root CA sits at the top of the certificate chain and signs its own certificate because there is no higher authority above it, which is exactly what makes it self-signed by definition.
Correct on the self-signed part, but worth adding that the "root CA" label comes from trust anchors in the OS or browser store, not just the self-signing itself, since any cert can be self-signed without being trusted as a root.
Quick win, 20 seconds tops. If a CA signs its OWN certificate, what does that make it in the chain hierarchy?
The "self-signed" phrasing is doing a lot of work here and might trip you up if you confuse self-signed with self-issued in a subordinate context, but a Root CA signs its own certificate because there is no higher authority to sign it for, which is exactly what self-signed means in PKI. D is tempting if you are thinking about a CA that lives under another CA in a hierarchy, but a subordinate CA gets its cert signed by the root above it, not by itself, so A is the only answer that holds.