MENU
The communication between two services operating within the same organization needs to be protected using message-layer security. These services are only used within the organizational boundary. The question is raised as to whether to use self-signed certificates or certificates signed by a certificate authority. A security specialist states that only certificates signed by an external certificate authority can be used to fulfill this security requirement. Is this correct?
Suggested Answer: B
Get Premium S90.18 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
23 comments · newest first
KE
Kelvin
11 months ago
Seems risky to rely on self-signed, though.
EL
Elina
11 months ago
No way, self-signed can work just fine for this!
GL
Glory
11 months ago
I thought only external CAs were valid for security compliance?
LU
Luis
12 months ago
Totally agree, external CA isn't necessary for internal services.
WE
Weldon
12 months ago
Self-signed certificates can be used internally.
DO
Dorcas
12 months ago
This seems similar to a case we discussed in class, where we concluded that internal services could use self-signed certificates without issues.
FA
Fatima
1 year ago
I feel like the specialist is being too strict; I thought self-signed certificates were fine as long as both services trust them.
LA
Laila
1 year ago
I think we practiced a question where self-signed certificates were acceptable for internal services, but I can't recall the specifics.
ME
Merissa
1 year ago
I remember studying that self-signed certificates can be used for internal communications, but I'm not sure if they meet all security requirements.
CA
Cassie
1 year ago
This is a tricky one. The security specialist's statement seems definitive, but I'm not sure if that's the only correct answer. I'll need to review my notes on certificate authorities and organizational boundaries to decide.
AR
Ardella
1 year ago
Okay, I've got a strategy here. The key is to focus on the security requirement of message-layer protection. Since the services are internal, self-signed certificates could potentially fulfill that requirement. I'll weigh the pros and cons and make my best judgment.
FE
Felice
1 year ago
Hmm, I'm a bit unsure about this one. The question mentions that the services are only used within the organizational boundary, so I'm not sure if that changes the security requirements. I'll need to think this through carefully.
VE
Veronika
1 year ago
This seems like a straightforward question about the use of self-signed certificates versus certificates signed by a CA. I think I have a good understanding of the concepts, so I'll carefully read through the details and make my choice.
AH
Ahmad
1 year ago
I'm a bit confused on this one. The requirements seem to conflict a bit - 24-hour availability but also the ability to control failover. I'm not sure if any of these options fully meet all the criteria. I might need to do some more research on disaster recovery solutions to figure out the best approach.
IS
Isadora
1 year ago
I'm a bit unsure about this one. The options mention different maintenance menus, but I'm not sure which one specifically shows the software release details for all the nodes. I'll have to think this through carefully.
RE
Renea
1 year ago
Hmm, I'm hesitant, but I feel like **D - Visibility/Graphic Overrides** could also relate to controlling boundaries in plan views.
HA
Harris
1 year ago
I'm pretty sure it's not option 'A', because I remember there should be a 'type' like 'text/css' in it too.
BR
Breana
1 year ago
Ugh, I hate questions like this that are so specific and technical. I'm going to have to guess on this one since I don't have a good intuitive feel for the right bend radius. Maybe I'll just go with C since it's the middle option.
LA
Lawana
2 years ago
I disagree, I think self-signed certificates are sufficient for internal communication.
CA
Carey
2 years ago
I'm not sure, but I think the security specialist is correct. External certificates are generally more trusted.
DA
Daron
2 years ago
I agree with Eladia, external certificate authority signed certificates provide stronger security assurance.
AN
Anissa
2 years ago
But why can't we just use self-signed certificates? They are easier and more cost-effective.
EL
Eladia
2 years ago
I think we should use certificates signed by an external certificate authority.