Question

Your network has a mix of Windows, Macintosh, Linux and AIX computers. All of your internal web applications use Web Server certificates issued by your PKI. How will you need to configure your AIA and CDP?

A) As LDAP paths

B) As file server paths

C) As URLs (HTTP paths)

D) As CIFS paths

Answer 1

To ensure accessibility of the Authority Information Access (AIA) and Certificate Revocation List Distribution Points (CDP) by all operating systems in the network, they should be configured as URLs (HTTP paths). This caters to Windows, Macintosh, Linux, and AIX operating systems.

Step-by-step explanation:

The question is regarding the configuration of Authority Information Access (AIA) and Certificate Revocation List Distribution Points (CDP) for a network that has a variety of operating systems, including Windows, Macintosh, Linux, and AIX, and uses a Public Key Infrastructure (PKI) to issue Web Server certificates. In such a diverse environment, AIA and CDP paths should be accessible by all systems.

Configuring them as URLs (HTTP paths) is the most universally accessible method. This way, any system that can perform HTTP requests—regardless of its operating system—can access the certificate information and revocation lists. Configuring as LDAP paths or CIFS paths could limit accessibility due to compatibility issues with certain OS, and file server paths would not be recommended due to similar concerns on a heterogeneous network.