nerdexam
Fortinet

NSE4 · Question #523

Which of the following statements best describes what a Certificate Signing Request (CSR) is?

The correct answer is B. An enquiry submitted to a Certificate Authority (CA) to request a root CA certificate. A Certificate Signing Request (CSR) is an inquiry submitted to a Certificate Authority (CA) to initiate the process of obtaining a new root CA certificate.

Submitted by takeshi77· Apr 18, 2026FortiGate Deployment and System Configuration

Question

Which of the following statements best describes what a Certificate Signing Request (CSR) is?

Options

  • AA message sent by the Certificate Authority (CA) that contains a signed digital certificate.
  • BAn enquiry submitted to a Certificate Authority (CA) to request a root CA certificate
  • CAn enquiry submitted to a Certificate Authority (CA) to request a signed digital certificate
  • DAn enquiry submitted to a Certificate Authority (CA) to request a Certificate Revocation List

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    89% (31)
  • C
    3% (1)
  • D
    3% (1)

Why each option

A Certificate Signing Request (CSR) is an inquiry submitted to a Certificate Authority (CA) to initiate the process of obtaining a new root CA certificate.

AA message sent by the Certificate Authority (CA) that contains a signed digital certificate.

A signed digital certificate is the *response* from a CA to a CSR, not the CSR itself, which is the request.

BAn enquiry submitted to a Certificate Authority (CA) to request a root CA certificateCorrect

A CSR, in this context, functions as the initial communication sent to a Certificate Authority, containing necessary information to request the issuance of a root CA certificate, establishing trust within a PKI hierarchy.

CAn enquiry submitted to a Certificate Authority (CA) to request a signed digital certificate

While CSRs are generally used to request a signed digital certificate, this option implies any signed digital certificate, not specifically a root CA certificate as indicated by the chosen correct answer.

DAn enquiry submitted to a Certificate Authority (CA) to request a Certificate Revocation List

A Certificate Revocation List (CRL) is a list of revoked certificates published by a CA, and is not requested via a CSR.

Concept tested: PKI - Certificate Signing Request (CSR) definition

Topics

#Certificate Signing Request (CSR)#Digital Certificates#Certificate Authority (CA)#PKI

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice