In a hierarchical CA topology, where can a subordinate CA obtain a certificate for itself?

  • from the root CA only
  • from the root CA or from self-generation
  • from the root CA or another subordinate CA at the same level
  • from the root CA or another subordinate CA at a higher level
  • from the root CA or another subordinate CA anywhere in the tree
Answers Explanation & Hints:

In a hierarchical CA topology, CAs can issue certificates to end users and to subordinate CAs, which in turn issue their certificates to end users, other lower level CAs, or both. In this way, a tree of CAs and end users is built in which every CA can issue certificates to lower level CAs and end users. Only the root CA can issue a self-signing certificate in a hierarchical CA topology.

For more Questions and Answers:

CyberOps Associate 1.02 & CA v1.0 Modules 21 – 23: Cryptography and Endpoint Protection Group Exam Answers Full 100%

Network Security 1.0 Modules 15-17: Cryptography Group Exam Answers Full 100%