nerdexam
CompTIA

SY0-501 · Question #92

Which of the following would a security specialist be able to determine upon examination of a server's certificate?

The correct answer is D. OID. Upon examining a server's certificate, a security specialist can identify Object Identifiers (OIDs), which provide details about the certificate's policies and extensions.

Submitted by devops_kid· Mar 4, 2026General security concepts

Question

Which of the following would a security specialist be able to determine upon examination of a server's certificate?

Options

  • ACA public key
  • BServer private key
  • CCSR
  • DOID

How the community answered

(42 responses)
  • A
    7% (3)
  • B
    12% (5)
  • C
    2% (1)
  • D
    79% (33)

Why each option

Upon examining a server's certificate, a security specialist can identify Object Identifiers (OIDs), which provide details about the certificate's policies and extensions.

ACA public key

A server certificate contains the name of the issuing CA and is signed by the CA's private key, but it does not embed the CA's public key within itself.

BServer private key

The server's private key must remain confidential and is never included in the publicly distributed server certificate for security reasons.

CCSR

A Certificate Signing Request (CSR) is the initial request submitted to a CA for a certificate and is not part of the issued certificate itself.

DOIDCorrect

Object Identifiers (OIDs) are unique numerical identifiers embedded within X.509 certificates, typically found in extension fields, that specify various attributes such as certificate policies, key usage, or extended key usage. A security specialist can parse these OIDs to determine the specific purpose, features, or policies enforced during the certificate's issuance and its intended application.

Concept tested: X.509 Certificate Components and Analysis

Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/oids

Topics

#PKI#X.509 certificates#OID#certificate structure

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice