nerdexam
GIAC

GSLC · Question #394

You work as a Network Administrator for NetTech Inc. You want to have secure communication on the company's intranet. You decide to use public key and private key pairs. What will you implement to acc

The correct answer is D. Certificate server. A Certificate Server implements Public Key Infrastructure (PKI), issuing and managing the digital certificates that bind public keys to identities for secure communications.

Security Architecture & Engineering

Question

You work as a Network Administrator for NetTech Inc. You want to have secure communication on the company's intranet. You decide to use public key and private key pairs. What will you implement to accomplish this?

Options

  • AFTP server
  • BVPN
  • CMicrosoft Internet Information Server (IIS)
  • DCertificate server

How the community answered

(43 responses)
  • A
    2% (1)
  • C
    5% (2)
  • D
    93% (40)

Why each option

A Certificate Server implements Public Key Infrastructure (PKI), issuing and managing the digital certificates that bind public keys to identities for secure communications.

AFTP server

An FTP server is used for transferring files between hosts and has no capability to issue or manage cryptographic key pairs or digital certificates.

BVPN

A VPN creates an encrypted tunnel for network traffic but does not itself manage or issue public/private key pairs - it may use PKI as an underlying mechanism, but implementing a VPN alone does not establish a certificate infrastructure.

CMicrosoft Internet Information Server (IIS)

Microsoft IIS is a web hosting platform for serving websites and applications; it can use certificates but cannot issue or manage them as a Certificate Authority.

DCertificate serverCorrect

A Certificate Server (such as Windows Active Directory Certificate Services) is the component that implements PKI by acting as a Certificate Authority (CA) - it issues, manages, revokes, and stores digital certificates that associate a public key with a verified identity. This infrastructure enables the public/private key pair system needed for encrypted, authenticated communications on an intranet. Without a certificate server, there is no trusted mechanism to distribute and validate public keys across the network.

Concept tested: PKI and Certificate Authority implementation for secure communications

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/active-directory-certificate-services-overview

Topics

#PKI#certificate server#public key infrastructure#asymmetric encryption

Community Discussion

No community discussion yet for this question.

Full GSLC Practice