CompTIA CASP+ (CAS-004) — Question 391

A PKI engineer is defining certificate templates for an organization's CA and would like to ensure at least two of the possible SAN certificate extension fields populate for documentation purposes. Which of the following are explicit options within this extension? (Choose two.)

Answer options

Correct answer: B, F

Explanation

The correct answers are B (Email) and F (DNS name) because these are explicitly defined types of SAN fields that can be included in a certificate. The other options, while relevant in different contexts, are not recognized as SAN extension fields.