CompTIA Security+ (SY0-701) — Question 487

An administrator must replace an expired SSL certificate. Which of the following does the administrator need to create the new SSL certificate?

Answer options

• A. CSR
• B. OCSP
• C. Key
• D. CRL

Correct answer: A

Explanation

To create a new SSL certificate, an administrator must generate a Certificate Signing Request (CSR), which contains the necessary information for the certificate authority. OCSP, Key, and CRL serve different purposes in the certificate lifecycle and are not used for generating a new SSL certificate.