nerdexam
CompTIA

SY0-301 · Question #422

The security administrator installed a newly generated SSL certificate onto the company web server. Due to a mis-configuration of the website, a downloadable file containing one of the pieces of the…

The correct answer is B. The file containing the public key. Disclosure of a public key does not compromise SSL certificate security and does not require reissuance because the public key is designed to be shared openly.

General security concepts

Question

The security administrator installed a newly generated SSL certificate onto the company web server. Due to a mis-configuration of the website, a downloadable file containing one of the pieces of the key was available to the public. It was verified that the disclosure did not require a reissue of the certificate. Which of the following was MOST likely compromised?

Options

  • AThe file containing the recovery agent's keys.
  • BThe file containing the public key.
  • CThe file containing the private key.
  • DThe file containing the server's encrypted passwords.

How the community answered

(53 responses)
  • A
    15% (8)
  • B
    74% (39)
  • C
    8% (4)
  • D
    4% (2)

Why each option

Disclosure of a public key does not compromise SSL certificate security and does not require reissuance because the public key is designed to be shared openly.

AThe file containing the recovery agent's keys.

Compromise of a recovery agent's keys would be a separate PKI event unrelated to SSL certificate issuance and would likely require remediation steps beyond a simple certificate reissue.

BThe file containing the public key.Correct

In asymmetric cryptography, the public key is mathematically intended to be distributed publicly. Its exposure does not compromise the certificate or the encrypted channel because security depends on the secrecy of the private key. Since no private key material was disclosed, reissuance was not necessary.

CThe file containing the private key.

If the private key had been compromised, the certificate would absolutely require immediate revocation and reissuance, contradicting the scenario's stated outcome.

DThe file containing the server's encrypted passwords.

A file containing encrypted server passwords is unrelated to SSL certificate key material and its disclosure would not be relevant to certificate reissuance decisions.

Concept tested: Asymmetric key pair roles in SSL certificates

Source: https://learn.microsoft.com/en-us/azure/key-vault/certificates/about-certificates

Topics

#PKI#public key#SSL/TLS#certificate management

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice