Fundamentals of InfoSecintermediate
Select ALL items that the described Certificate Signing Request (CSR) can contain.
Answer
The server's public key, Subject identity information, A signature made with the server's private key
Explanation
### Why this is right
- **The server's public key** is included so the eventual certificate can bind that key to the requested subject.
- **Subject identity information** identifies the entity requesting the certificate, such as its Common Name (CN) and organization fields.
- **A signature made with the server's private key** lets the issuer verify that the requester possesses the private key matching the included public key.
### The concept
A Certificate Signing Request (CSR) combines a proposed identity, a public key, and proof of possession. The issuer checks the request and, if appropriate, creates a certificate containing the subject and public key, then signs that certificate with the issuer's private key. The CSR's signature and the issued certificate's signature serve different stages and are made by different parties.
### The other options
- **The server's private key**: this is secret and remains with the server. Including it would disclose the key rather than prove possession safely.
### Terms
- **CSR**: Certificate Signing Request. A signed request for a certificate.
- **CN**: Common Name. A subject field often holding a website hostname.
### Remember
A CSR contains proof made by the private key, not the private key itself.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free