A certificate for a company's VPN server is nearing its expiration date. The administrator wants to replace it with a new certificate before the current one expires to avoid service disruption. Which process should the administrator follow?

Revoke the current certificate and continue using it until the new one is issued.

Extend the validity period of the existing certificate by editing its expiration date.

Reuse the existing key pair and ask the CA to re-sign the same CSR.

Generate a new key pair and submit a new Certificate Signing Request (CSR) to the CA for a new certificate.

What is the purpose of key rotation in key management?

To allow multiple users to share the same key

To reduce the risk of key compromise by limiting the amount of data encrypted with a single key

What is the recommended practice for storing private keys?

In a hardware security module (HSM)

In a shared network folder for easy access

In a plain text file on the desktop

LPI Security Essentials

Domain 2Objective 1

022.1 Cryptography and Public Key Infrastructure (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 5)

Part of the 022 Encryption domain, which makes up ~20% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

10concepts

Questions 21–25

21foundation · easy
Which field in an X.509 certificate identifies the entity that the certificate is issued to?
Select an answer first
22application · medium
A certificate for a company's VPN server is nearing its expiration date. The administrator wants to replace it with a new certificate before the current one expires to avoid service disruption. Which process should the administrator follow?
Select an answer first
23foundation · easy
What is the purpose of key rotation in key management?
Select an answer first
24foundation · easy
Which cryptographic principle is primarily provided by a digital signature?
Select an answer first
25foundation · easy
What is the recommended practice for storing private keys?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

022.1 Cryptography and Public Key Infrastructure (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 5)

Questions 21–25

Which field in an X.509 certificate identifies the entity that the certificate is issued to?

A certificate for a company's VPN server is nearing its expiration date. The administrator wants to replace it with a new certificate before the current one expires to avoid service disruption. Which process should the administrator follow?

What is the purpose of key rotation in key management?

Which cryptographic principle is primarily provided by a digital signature?

What is the recommended practice for storing private keys?

Keep studying — 022 Encryption