Juniper
JN0-633 · Question #116
Your company plans to increase the security level for VPNs in its network by using certificates instead of preshared keys The company wants to introduce its own centrally administered certificate…
The correct answer is C. Roll out a certificate automation system that is based on SCEP. See the full explanation below for the reasoning.
Question
Your company plans to increase the security level for VPNs in its network by using certificates instead of preshared keys The company wants to introduce its own centrally administered certificate authority from which all device certificates will be derived. You have been asked to automate certification enrollment, re-enrollment, and revocation. How can you implement this?
Options
- AUse self-signed certificates on each device and have copies stored centrally
- BContract out this problem to VeriSign to deliver a solution.
- CRoll out a certificate automation system that is based on SCEP.
- DBuy certificates that do not need to be renewed from Entrust.
How the community answered
(33 responses)- A3% (1)
- B3% (1)
- C82% (27)
- D12% (4)
Community Discussion
No community discussion yet for this question.