GSLC · Question #394
You work as a Network Administrator for NetTech Inc. You want to have secure communication on the company's intranet. You decide to use public key and private key pairs. What will you implement to acc
The correct answer is D. Certificate server. A Certificate Server implements Public Key Infrastructure (PKI), issuing and managing the digital certificates that bind public keys to identities for secure communications.
Question
You work as a Network Administrator for NetTech Inc. You want to have secure communication on the company's intranet. You decide to use public key and private key pairs. What will you implement to accomplish this?
Options
- AFTP server
- BVPN
- CMicrosoft Internet Information Server (IIS)
- DCertificate server
How the community answered
(43 responses)- A2% (1)
- C5% (2)
- D93% (40)
Why each option
A Certificate Server implements Public Key Infrastructure (PKI), issuing and managing the digital certificates that bind public keys to identities for secure communications.
An FTP server is used for transferring files between hosts and has no capability to issue or manage cryptographic key pairs or digital certificates.
A VPN creates an encrypted tunnel for network traffic but does not itself manage or issue public/private key pairs - it may use PKI as an underlying mechanism, but implementing a VPN alone does not establish a certificate infrastructure.
Microsoft IIS is a web hosting platform for serving websites and applications; it can use certificates but cannot issue or manage them as a Certificate Authority.
A Certificate Server (such as Windows Active Directory Certificate Services) is the component that implements PKI by acting as a Certificate Authority (CA) - it issues, manages, revokes, and stores digital certificates that associate a public key with a verified identity. This infrastructure enables the public/private key pair system needed for encrypted, authenticated communications on an intranet. Without a certificate server, there is no trusted mechanism to distribute and validate public keys across the network.
Concept tested: PKI and Certificate Authority implementation for secure communications
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/active-directory-certificate-services-overview
Topics
Community Discussion
No community discussion yet for this question.