nerdexam
CompTIA

CAS-005 · Question #402

An administrator needs to craft a single certificate-signing request for a web-server certificate. The server should be able to use the following identities to mutually authenticate other resources…

The correct answer is B. Organizational unit. The Subject Alternative Name (SAN) field must be properly set to include all the required identities - FQDNs and IP addresses - so the certificate can be used for mutual TLS authentication with those specific identifiers.

Submitted by layla.eg· Mar 6, 2026Security Engineering

Question

An administrator needs to craft a single certificate-signing request for a web-server certificate. The server should be able to use the following identities to mutually authenticate other resources over TLS:

webserver01 .int.comptia.org 10.5.100.10 Which of the following certificate fields must be set properly to support this objective?

Options

  • ASubject alternative name
  • BOrganizational unit
  • CExtended key usage
  • DCertificate extension

How the community answered

(38 responses)
  • B
    95% (36)
  • C
    3% (1)
  • D
    3% (1)

Explanation

The Subject Alternative Name (SAN) field must be properly set to include all the required identities - FQDNs and IP addresses - so the certificate can be used for mutual TLS authentication with those specific identifiers.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice