2026 STUDY QUESTIONS WITH CORRECT VERIFIED
ANSWERS GUARANTEED PASS | RATED A+
An entity looking to obtain a digital certificate, will create and submit a _____ to the CA to
formally request the certificate.
CSR
PEM
PKCS
registration authority - Answer>>> CSR
-Someone looking to obtain a digital certificate will first generate an asymmetric key pair and
then generate a certificate signing request (CSR). The person will provide the CA with the public
key from the generated key pair along with the CSR to formally request a digital certificate.
4 Basic steps for obtaining a digital certificate signed by a trusted Certificate Authority (CA):
Step 1: Requester generates a keypair (one public, one private).
Step 2: Requester creates a Certificate Signing Request (CSR) and submits CSR (which includes
public key from the key pair generated) to the CA.
Step 3: CA validates submission and generates the digital certificate for the requester.
Step 4: CA signs the requester's digital certificate with the CA's own private key and issues
certificate to the requester.
What will a certificate authority (CA) do just before issuing a digital certificate to a requesting
entity?
CA will sign the certificate with its own private key
CA will sign the certificate with the requester's public key
CA will sign the certificate with its own public key
, CA will pad the certificate - Answer>>> CA will sign the certificate with its own private key
-CA will sign the digital certificate with the CA's own private key before issuing it. This will
allow for validation of the certificate as being issued by the CA (trusted 3rd party), using the
CA's public key.
4 Basic steps for obtaining a digital certificate signed by a trusted Certificate Authority (CA):
Step 1: Requester generates a keypair (one public, one private).
Step 2: Requester creates a Certificate Signing Request (CSR) and submits CSR (which includes
public key from the key pair generated) to the CA.
Step 3: CA validates submission and generates the digital certificate for the requester.
Step 4: CA signs the requester's digital certificate with the CA's own private key and issues
certificate to the requester.
___ describes the condition where a certificate is moved to an invalid or untrusted state prior to
its original expiration date, that cannot be reversed.
Revoked
Hold
Retrival
Intermediate - Answer>>> Revoked
-There are also instances where a certificate needs to moved to an invalid/untrusted state
(revoked) prior to the original expiration date. Some reasons warranting having a cert revoked
include but are not limited to:
Issuing CA was compromised
The cert itself was compromised
Certificate affiliation has changed
Certificate has been updated or superseded