Which certificate format does a Cisco WSA need when HTTPS proxy is configured?

The correct answer is C. PEM. The Cisco WSA requires certificates in PEM (Privacy Enhanced Mail) format when configuring the HTTPS proxy feature. PEM is a Base64-encoded ASCII format that contains the certificate and optionally the private key, delimited by '-----BEGIN CERTIFICATE-----' and '-----END…

Decryption

Question

Options

ADER
BCER
CPEM
DCRL

How the community answered

(35 responses)

A
3% (1)
C
91% (32)
D
6% (2)

Explanation

The Cisco WSA requires certificates in PEM (Privacy Enhanced Mail) format when configuring the HTTPS proxy feature. PEM is a Base64-encoded ASCII format that contains the certificate and optionally the private key, delimited by '-----BEGIN CERTIFICATE-----' and '-----END CERTIFICATE-----' headers. The WSA uses this certificate as a Certificate Authority (CA) to re-sign certificates during HTTPS inspection (man-in-the-middle decryption). DER is a binary format not accepted by WSA for this purpose; CER is typically a Windows-specific format; and CRL (Certificate Revocation List) is used to check whether a certificate has been revoked, not for proxy configuration.

Topics

#Cisco WSA#HTTPS Proxy#Certificate Formats#SSL Decryption

Community Discussion

No community discussion yet for this question.

Full 300-725 Practice