Fundamentals of InfoSecintermediate
Match each component of the Public Key Infrastructure (PKI) certificate issuance workflow to its correct role.
Answer
Certificate Signing Request (CSR) - Contains the applicant's public key and identity data submitted to a Certificate Authority., Server private key - Secret key created and kept secure on the host server to prove its identity during TLS handshakes., CA private key - Secret key used exclusively by the Certificate Authority to digitally sign issued certificates., CA certificate - Publicly distributed credential containing the public key needed to verify signatures on issued certificates.
Explanation
### Why this is right
Each item has a distinct place in certificate issuance. The CSR sends the public information for review, the server’s private key stays with the server, the CA’s private key signs the certificate, and the CA certificate supplies the public key used to check that signature.
### The pairs
| Item | Matches | Why |
|---|---|---|
| Certificate Signing Request (CSR) | Carries the server’s public key and subject information for the CA to review. | The CSR asks the CA to certify a particular public key for the stated subject. |
| Server private key | Secret key generated and retained by the server. | It belongs to the server and should not be included in the CSR or transferred to the customer. |
| CA private key | Secret key used by the CA to sign issued certificates. | The CA uses this secret key to create signatures that verifiers check with the CA’s public key. |
| CA certificate | Certificate whose public key can be used to check an issued certificate’s signature. | The CA certificate provides the public key used for checking, if the verifier trusts that CA. |
### Terms
- **Certificate Signing Request (CSR)**: A request containing a public key and subject information for a certificate.
- **Certificate Authority (CA)**: An entity that issues and signs certificates.
- **Public key**: A shareable key used for verification or other public-key operations.
- **Private key**: A secret key that must remain under its owner’s control.
- **Signature**: A cryptographic mark that can be checked to detect alteration and identify the signing key.
### Remember
Keep the server’s secret key, the CA’s signing key, and the CA’s public certificate in separate roles.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free