A security engineer is implementing a code signing requirement for all code developed by the organization. Currently, the PKI only generates website certificates. Which of the following steps should t

The correct answer is A. Add a new template on the internal CA with the correct attributes.. To enable code signing with an existing PKI, the first step is to configure the Certificate Authority (CA) to issue code signing certificates. Adding a new template with attributes specific to code signing (e.g., key usage for signing) allows the CA to support this requirement wi

Submitted by noor.lb· Mar 6, 2026Security Engineering

Question

A security engineer is implementing a code signing requirement for all code developed by the organization. Currently, the PKI only generates website certificates. Which of the following steps should the engineer perform first?

Options

AAdd a new template on the internal CA with the correct attributes.
BGenerate a wildcard certificate for the internal domain.
CRecalculate a public/private key pair for the root CA.
DImplement a SAN for all internal web applications.

How the community answered

(51 responses)

A
80% (41)
B
6% (3)
C
2% (1)
D
12% (6)

Explanation

To enable code signing with an existing PKI, the first step is to configure the Certificate Authority (CA) to issue code signing certificates. Adding a new template with attributes specific to code signing (e.g., key usage for signing) allows the CA to support this requirement without disrupting existing operations.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice