PKI · Question 11 of 12
A web server's private key was copied during a break-in. The certificate is valid for another ten months. Which steps are necessary?
3 answers are correct. Hard
Show answer
Answer
- A Have the certificate revoked by the CA
- C Check whether the same key is used on other systems
- D Generate a new key pair and request a new certificate
Explanation
With the copied key, an attacker can impersonate the server. That is why the certificate is revoked immediately, a new key pair is generated and a new certificate issued. If the key was used in several places, for example as a wildcard, all of them are affected.