SY0-301 · Question #422
The security administrator installed a newly generated SSL certificate onto the company web server. Due to a mis-configuration of the website, a downloadable file containing one of the pieces of the…
The correct answer is B. The file containing the public key. Disclosure of a public key does not compromise SSL certificate security and does not require reissuance because the public key is designed to be shared openly.
Question
The security administrator installed a newly generated SSL certificate onto the company web server. Due to a mis-configuration of the website, a downloadable file containing one of the pieces of the key was available to the public. It was verified that the disclosure did not require a reissue of the certificate. Which of the following was MOST likely compromised?
Options
- AThe file containing the recovery agent's keys.
- BThe file containing the public key.
- CThe file containing the private key.
- DThe file containing the server's encrypted passwords.
How the community answered
(53 responses)- A15% (8)
- B74% (39)
- C8% (4)
- D4% (2)
Why each option
Disclosure of a public key does not compromise SSL certificate security and does not require reissuance because the public key is designed to be shared openly.
Compromise of a recovery agent's keys would be a separate PKI event unrelated to SSL certificate issuance and would likely require remediation steps beyond a simple certificate reissue.
In asymmetric cryptography, the public key is mathematically intended to be distributed publicly. Its exposure does not compromise the certificate or the encrypted channel because security depends on the secrecy of the private key. Since no private key material was disclosed, reissuance was not necessary.
If the private key had been compromised, the certificate would absolutely require immediate revocation and reissuance, contradicting the scenario's stated outcome.
A file containing encrypted server passwords is unrelated to SSL certificate key material and its disclosure would not be relevant to certificate reissuance decisions.
Concept tested: Asymmetric key pair roles in SSL certificates
Source: https://learn.microsoft.com/en-us/azure/key-vault/certificates/about-certificates
Topics
Community Discussion
No community discussion yet for this question.