Fundamentals of InfoSecintermediate
Select ALL accurate statements about the OpenSSL command `openssl genpkey -algorithm RSA -out infinityca.key -aes256`.
Answer
It generates a Rivest-Shamir-Adleman (RSA) private key., It writes the key to `infinityca.key`., The `-aes256` option encrypts the saved private-key file using Advanced Encryption Standard with a 256-bit key (AES-256).
Explanation
### Why this is right
- **It generates a Rivest-Shamir-Adleman (RSA) private key.** The `genpkey` operation generates a key, and `-algorithm RSA` selects the algorithm.
- **It writes the key to `infinityca.key`.** The `-out` option names the output file.
- **The `-aes256` option encrypts the saved private-key file using Advanced Encryption Standard with a 256-bit key (AES-256).** OpenSSL requests a passphrase that will be needed to use the protected key file.
### The concept
A private-key file can be encrypted at rest so that someone who obtains the file also needs its passphrase to use it. This file protection is distinct from a certificate signature: the key-file encryption protects the stored secret, while the CA's private key later signs certificates. The command generates a key, not a certificate.
### The other options
- **It creates a self-signed X.509 certificate.** This describes a certificate-creation operation, not `genpkey`; certificate creation is performed separately.
### Terms
- **RSA**: Rivest-Shamir-Adleman. A public-key cryptographic algorithm.
- **AES-256**: Advanced Encryption Standard with a 256-bit key. It encrypts the private-key file in this command.
### Remember
`genpkey` creates a key; certificate creation is a separate step.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free