HP Exam HPE7-A02 Topic 15 Question 19 Discussion

Actual exam question for HP's HPE7-A02 exam

Question #: 19
Topic #: 15

[All HPE7-A02 Questions]

You are using OpenSSL to obtain a certificate signed by a Certification Authority (CA). You have entered this command:

openssl req -new -out file1.pem -newkey rsa:3072 -keyout file2.pem

Enter PEM pass phrase: **********

Verifying - Enter PEM pass phrase: **********

Country Name (2 letter code) [AU]:US

State or Province Name (full name) [Some-State]:California

Locality Name (eg, city) []:Sunnyvale

Organization Name (eg, company) [Internet Widgits Pty Ltd]:example.com

Organizational Unit Name (eg, section) []:Infrastructure

Common Name (e.g. server FQDN or YOUR name) []:radius.example.com

What is one guideline for continuing to obtain a certificate?

AYou should use a third-party tool to encrypt file2.pem before sending it and file1.pem to the CA.

BYou should concatenate file1.pem and file2.pem into a single file, and submit that to the desired CA to sign.

CYou should submit file1.pem, but not file2.pem, to the desired CA to sign.

DYou should submit file2.pem, but not file1.pem, to the desired CA to sign.

Show Suggested Answer

Suggested Answer: C

When using OpenSSL to obtain a certificate signed by a Certification Authority (CA), you should submit the Certificate Signing Request (CSR) file, which is file1.pem, to the CA. The CSR contains the information about the entity requesting the certificate and the public key, but not the private key, which is in file2.pem. The CA uses the information in the CSR to create and sign the certificate.

1. CSR Submission: The CSR (file1.pem) includes the public key and the entity information required by the CA to issue a certificate.

2. Private Key Security: The private key (file2.pem) should never be sent to the CA or shared; it remains securely stored on the requestor's server.

3. Certificate Issuance: After the CA signs the CSR, the resulting certificate can be used with the private key to establish secure communications.

by Devon at Aug 05, 2025, 03:11 AM

Limited Time Offer

25%

Off

Get Premium HPE7-A02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Emilio

4 hours ago

I think option B is the correct answer. Concatenating the certificate request file (file1.pem) and the private key file (file2.pem) into a single file and submitting that to the CA seems like the right way to go.

upvoted 0 times

...