MENU
What is the main problem of the renewal of a root CA certificate?
Suggested Answer: C
Get Premium SSCP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2001, Page 644.
41 comments · newest first
MA
Mattie
11 months ago
Key recovery is a hassle, but distribution is the real headache.
LA
Lai
11 months ago
I thought it was just about issuing the new one, not all this extra stuff!
JA
Jacki
11 months ago
Wait, do we really need to collect old certificates? Sounds complicated.
SH
Sherita
11 months ago
Totally agree, B is the main issue here.
NI
Nicolette
12 months ago
It's all about distributing the new root CA certificate!
WI
Winfred
12 months ago
I’m leaning towards option B since it sounds familiar from our discussions, but I could be mixing it up with another topic we covered.
EF
Effie
12 months ago
I vaguely recall that collecting old root CA certificates was mentioned, but it seems less critical compared to ensuring everyone gets the new one.
AR
Arletta
1 year ago
I think the key recovery aspect might be important too, but it feels like there was more emphasis on the distribution challenge in our practice questions.
SH
Shala
1 year ago
I remember something about the distribution of the new root CA certificate being a big deal, but I'm not completely sure if that's the main problem.
DI
Diane
1 year ago
Hmm, I'm not sure about this one. I know the Visual Experience Composer has different features, but I'm not totally clear on how they all work. I'll have to think this through carefully.
GR
Gracie
1 year ago
Okay, let me think this through. The question is asking about changing client behavior from the default settings, so I'm guessing the answer has to do with configuring some specific attributes. I'll need to carefully review the options.
AJ
Aja
1 year ago
I think the Supply/Demand Report (R4051) would be the best option to view ATP inventory levels for a specified time period.
LA
Lashawna
1 year ago
The business requirement is definitely a critical factor. I'll focus on that as I evaluate the answer choices.
AL
Allene
1 year ago
I bet the guy who wrote this question is the same one who thought it was a good idea to use floppy disks for software distribution back in the day.
CA
Carolann
1 year ago
C) It requires the collection of the old root CA certificates from all the users
IL
Ilene
1 year ago
B) It requires the authentic distribution of the new root CA certificate to all PKI participants
RE
Rebbeca
1 year ago
A) It requires key recovery of all end user keys
KA
Kathrine
1 year ago
Option B all the way! Imagine trying to get every single user to update their root CA certificate. Good luck with that!
CH
Chi
1 year ago
User 3: It's a necessary step though, to maintain security and trust in the system.
TY
Tyisha
1 year ago
User 2: I agree, it's not easy to ensure all PKI participants receive the updated certificate.
BR
Brandee
1 year ago
User 1: Option B is definitely a challenge. It's a huge task to distribute the new root CA certificate to everyone.
GE
Gene
1 year ago
Hmm, I'm torn between B and D. Issuing the new root CA certificate could also be problematic, especially if you have a large PKI infrastructure.
TY
Tyisha
1 year ago
Hmm, I'm torn between B and D. Issuing the new root CA certificate could also be problematic, especially if you have a large PKI infrastructure.
GO
Goldie
1 year ago
B) It requires the authentic distribution of the new root CA certificate to all PKI participants
YO
Yolande
1 year ago
A) It requires key recovery of all end user keys
RE
Reita
1 year ago
I'm going with C. Collecting the old root CA certificates from all users is going to be a real headache in a renewal scenario.
JA
Jaclyn
1 year ago
D) It requires issuance of the new root CA certificate
SH
Shaniqua
1 year ago
C) It requires the collection of the old root CA certificates from all the users
LI
Lillian
1 year ago
B) It requires the authentic distribution of the new root CA certificate to all PKI participants
DI
Dick
1 year ago
A) It requires key recovery of all end user keys
VA
Valentine
1 year ago
User 3: I'm going with C. Collecting the old root CA certificates from all users is going to be a real headache in a renewal scenario.
ER
Erick
1 year ago
User 2: I agree with Erick. Authentic distribution of the new certificate seems like a big challenge.
GI
Gilberto
1 year ago
User 1: I think B is the main problem. Distributing the new root CA certificate to all PKI participants sounds like a hassle.
RO
Rolande
1 year ago
But don't you think C) It requires the collection of the old root CA certificates from all the users is also a major issue? It can be difficult to track down all the old certificates.
RO
Rosann
2 years ago
I agree with Mary. It's a challenge to ensure all participants receive the new certificate securely.
MA
Mary
2 years ago
I think the main problem is B) It requires the authentic distribution of the new root CA certificate to all PKI participants.
BA
Basilia
2 years ago
Option B seems like the most logical answer here. Distributing the new root CA certificate to all PKI participants is the main challenge in a renewal process.
LU
Luther
1 year ago
D) It requires issuance of the new root CA certificate
AN
Anthony
1 year ago
C) It requires the collection of the old root CA certificates from all the users
SK
Skye
1 year ago
B) It requires the authentic distribution of the new root CA certificate to all PKI participants
BE
Bettina
1 year ago
A) It requires key recovery of all end user keys