70-216 - Fri 70-216 Question of the Day

Author

Fri 70-216 Question of the Day

wbafrank

2002-04-26, 12:18 pm

And today's poser is ....

Q79. You are the administrator for your company's Windows 2000 network. The network uses CAs to ensure security of data files. While performing maintenance on the CA, you discover that one of the CAs has been compromised. Which steps must you take to repair the CA? (Choose all that apply)

A. Repair the cause of the compromise.

B. Revoke and reissue all certificates.

C. Create new policies for the CA hierarchy.

D. Revoke the certificate of the compromised CA.

E. Publish a new CRL with the revoked CA certificate.

F. Inform all users on the network of the compromised CA.

G. Inform the affected users and administrators of the compromised CA.

H. Generate public and private keys for all encrypted files on the network.

I. Remove the compromised CA from Trusted Root Certification Authorities stores and CTLs.

Good Luck .... see you tomorrow for the answer!!

KScheler

2002-04-26, 1:25 pm

A,D,E, & I

Never have liked the cerificate thing.

CyberDude

2002-04-26, 2:00 pm

I will have to agree with KScheler, as that does seem logical.

Zaraspook

2002-04-26, 8:05 pm

How about A, D, E, G, & I?

CyberDude

2002-04-27, 12:52 pm

Would they not find out via the CRL?

Flubber6755

2002-04-27, 3:27 pm

i have to agree with Zaraspook

mcdoud

2002-04-28, 12:02 am

...I better study this topic some more!

I'll wait for the answer on this one.

wbafrank

2002-04-28, 2:21 pm

quote:
Originally posted by wbafrank
And today's poser is ....

Q79. You are the administrator for your company's Windows 2000 network. The network uses CAs to ensure security of data files. While performing maintenance on the CA, you discover that one of the CAs has been compromised. Which steps must you take to repair the CA? (Choose all that apply)

A. Repair the cause of the compromise.
B. Revoke and reissue all certificates.
C. Create new policies for the CA hierarchy.
D. Revoke the certificate of the compromised CA.
E. Publish a new CRL with the revoked CA certificate.
F. Inform all users on the network of the compromised CA.
G. Inform the affected users and administrators of the compromised CA.
H. Generate public and private keys for all encrypted files on the network.
I. Remove the compromised CA from Trusted Root Certification Authorities stores and CTLs.

Good Luck .... see you tomorrow for the answer!!

And the answers is ....

Correct Answers: A, D, E, G and I

A CA's certificate must be removed when the certificate has been compromised. When you revoke a CA's certificates, the CA and its subordinate CAs are invalid, along with the certificates and subordinate certificates.

You should perform the following steps to repair the CA:

1. Revoke the certificate of the compromised CA.
2. Publish a new CRL with the revoked CA certificate.
3. Remove the compromised CA from Trusted Root Certification Authorities stores and CTLs.
4. Inform the affected users and administrators of the compromised CA.
5. Repair the cause of the compromise.

Sponsored Links