300-425 Question 218
Single answerA wireless administrator is configuring certificate provisioning on a Cisco wireless LAN controller (WLC) to enable secure authentication for APs and clients. The administrator has already created a Certificate Signing Request (CSR) on the WLC. What is the next step in the certificate provisioning process to ensure that the WLC can use the certificate for secure communications?
- A
Submit the CSR to a Certificate Authority (CA) to obtain a signed certificate.
- B
Generate a self-signed certificate on the WLC to bypass external CAs.
- C
Install the root CA certificate on the WLC before submitting the CSR.
- D
Enable HTTPS on the WLC to complete the certificate installation process.
Show answer and explanation
Correct answer: A
Explanation
The process of certificate provisioning starts with generating a CSR on the WLC. This CSR is submitted to a trusted Certificate Authority (CA) to obtain a signed certificate. The signed certificate is then installed on the WLC, along with the root CA certificate, to establish a secure and trusted environment for communications. Generating a self-signed certificate or enabling HTTPS does not fulfill the requirements for enterprise-grade security.
- A. Correct.
Correct. Once the CSR is generated, it must be submitted to a trusted Certificate Authority (CA) to obtain a signed certificate. This signed certificate will be installed on the WLC for secure communications.
- B. Incorrect.
Incorrect. While generating a self-signed certificate is an option, it is not recommended for enterprise environments due to trust issues. The question specifically refers to provisioning a certificate using a CSR.
- C. Incorrect.
Incorrect. Installing the root CA certificate is important but is done after obtaining the signed certificate from the CA. It is not the immediate next step after creating the CSR.
- D. Incorrect.
Incorrect. Enabling HTTPS is a separate process and is not directly related to the immediate next step in certificate provisioning. HTTPS is configured after the signed certificate is installed.