300-430 Question 219
Select 4An enterprise network administrator is configuring certificate provisioning on a Cisco wireless LAN controller (WLC) to secure communications between the controller and access points. The administrator decides to use a Certificate Authority (CA)-signed certificate for enhanced security. Which steps should the administrator perform to successfully provision the certificate on the WLC?
- A
Generate a Certificate Signing Request (CSR) on the WLC.
- B
Obtain a self-signed certificate directly from the WLC without involving a CA.
- C
Submit the CSR to a trusted Certificate Authority (CA).
- D
Install the CA-signed certificate on the WLC.
- E
Export the CA's root certificate and upload it to the WLC.
Show answer and explanation
Correct answers: A, C, D, E
Explanation
To provision a CA-signed certificate on a Cisco WLC, the administrator must generate a Certificate Signing Request (CSR) on the WLC and submit it to a trusted CA for signing. After receiving the signed certificate, it must be installed on the WLC. Additionally, the CA's root certificate should also be uploaded to the WLC to establish trust. A self-signed certificate does not require a CA and does not meet the security requirements of a CA-signed certificate, making it an incorrect choice for this scenario.
- A. Correct.
Correct: Generating a Certificate Signing Request (CSR) is a necessary first step to obtain a CA-signed certificate.
- B. Incorrect.
Incorrect: A self-signed certificate does not involve a CA and is less secure; it does not fulfill the requirement for a CA-signed certificate.
- C. Correct.
Correct: The CSR must be submitted to a trusted Certificate Authority to acquire a signed certificate.
- D. Correct.
Correct: Once the CA signs the certificate, it must be installed on the WLC to enable secure communication.
- E. Correct.
Correct: Installing the CA's root certificate on the WLC ensures the WLC can trust the CA that issued the certificate.