2V0-21.23 Question 238
Select 3An organization is planning to secure communication between its VMware vSphere components using SSL certificates. They have an existing Enterprise PKI infrastructure. Which of the following are valid reasons to use the Enterprise PKI for managing SSL certificates in this scenario?
- A
It allows for central management and lifecycle control of certificates.
- B
It automatically generates self-signed certificates for the vSphere environment.
- C
It ensures certificates are trusted by all enterprise systems without manual intervention.
- D
It eliminates the need to configure certificate revocation mechanisms like CRLs or OCSP.
- E
It provides the ability to customize certificate attributes to meet organizational security policies.
Show answer and explanation
Correct answers: A, C, E
Explanation
Using an Enterprise PKI for SSL certificates in a VMware vSphere environment allows for centralized management, ensures trust across the organization, and provides customization options to meet security policies. This improves the management and security of certificates compared to self-signed or manually distributed certificates.
- A. Correct.
Using an Enterprise PKI enables central management and control over the lifecycle of SSL certificates, including issuance, renewal, and revocation.
- B. Incorrect.
Self-signed certificates are not generated by an Enterprise PKI. Self-signed certificates are typically used when a Certificate Authority (CA) is not involved.
- C. Correct.
Enterprise PKI certificates are trusted across the organization because the root CA certificate is typically distributed and trusted in the enterprise environment.
- D. Incorrect.
While Enterprise PKI supports revocation mechanisms such as CRLs or OCSP, it does not eliminate the need to configure and manage these mechanisms.
- E. Correct.
Enterprise PKI provides flexibility to define and customize certificate attributes, such as key usage and validity periods, to align with organizational security requirements.