An administrator has successfully implemented SSL on srv4.comptia.com using wildcard certificate *.comptia.com, and now wishes to implement SSL on srv5.comptia.com. Which of the following files…

Question

Options

• Acertificate, private key, and intermediate certificate chain
• Bcertificate, intermediate certificate chain, and root certificate
• Ccertificate, root certificate, and certificate signing request
• Dcertificate, public key, and certificate signing request

• A
  83% (25)
• B
  10% (3)
• C
  3% (1)
• D
  3% (1)

Explanation

A wildcard certificate (*.comptia.com) is valid for any subdomain, so the same certificate can be used on both srv4 and srv5. To enable SSL on srv5, you need: (1) the certificate file, which contains the public key and identity information; (2) the private key, which is required to decrypt traffic and authenticate the server-without it SSL cannot function; and (3) the intermediate certificate chain, which allows clients to build a trust path from the server certificate to a trusted root CA. Option B lacks the private key. Option C includes a CSR (used to request a certificate, not serve one) and lacks the private key. Option D incorrectly separates the public key from the certificate (it is embedded in the certificate) and includes a CSR instead of the private key.

No community discussion yet for this question.