A company is setting up a PKI for internal use. They want to minimize the risk of a compromised root CA. What is the best practice?

Keep the root CA offline and use an intermediate CA for issuing certificates.

Store the root CA private key on a server with internet access for convenience.

Issue all certificates with a 10-year validity to reduce re-issuance.

Use the root CA directly to issue all certificates.

GIAC Security Leadership

Domain 4Objective 1

Cryptography Concepts for Managers GSLC Practice Questions (Page 11)

Part of the Cryptography and Privacy domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 4–6 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 51–51

51application · medium
A company is setting up a PKI for internal use. They want to minimize the risk of a compromised root CA. What is the best practice?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.

Cryptography Concepts for Managers GSLC Practice Questions (Page 11)

Questions 51–51

A company is setting up a PKI for internal use. They want to minimize the risk of a compromised root CA. What is the best practice?

Keep studying — Cryptography and Privacy