nerdexam
CompTIA

SY0-501 · Question #147

A Security engineer is configuring a system that requires the X 509 certificate information to be pasted into a form field in Base64 encoded format to import it into the system. Which of the…

The correct answer is B. PEM. The engineer should use the PEM format, as it is a text-based, Base64 encoded representation of X.509 certificates specifically designed for ease of transfer and pasting into text fields.

Submitted by krish.m· Mar 4, 2026General security concepts

Question

A Security engineer is configuring a system that requires the X 509 certificate information to be pasted into a form field in Base64 encoded format to import it into the system. Which of the following certificate formats should the engineer use to obtain the information in the required format?

Options

  • APFX
  • BPEM
  • CDER
  • DCER

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    80% (24)
  • C
    10% (3)
  • D
    3% (1)

Why each option

The engineer should use the PEM format, as it is a text-based, Base64 encoded representation of X.509 certificates specifically designed for ease of transfer and pasting into text fields.

APFX

PFX is a binary format that stores a certificate and its private key together, often password-protected, and is not a plain Base64 encoded text format suitable for direct pasting into a text field.

BPEMCorrect

PEM (Privacy-Enhanced Mail) is a standard text-based format for X.509 certificates and other cryptographic data, which uses Base64 encoding to represent the binary certificate data. This format is easily identifiable by its '-----BEGIN CERTIFICATE-----' and '-----END CERTIFICATE-----' headers, making it ideal for copying and pasting into form fields that expect Base64 encoded certificate information.

CDER

DER (Distinguished Encoding Rules) is a binary encoding format for X.509 certificates and is not directly Base64 encoded text suitable for pasting into a text field.

DCER

CER is a generic file extension that can contain certificates in either DER (binary) or PEM (Base64 text) format; however, it is often associated with binary DER-encoded certificates on Windows systems, which does not meet the Base64 requirement for pasting.

Concept tested: X.509 Certificate Formats (PEM, DER, PFX)

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/x.509-certificate-formats

Topics

#PEM format#X.509 certificates#Base64 encoding#PKI

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice