Exam CNX-001 topic 1 question 72 discussion

Actual exam question from CompTIA's CNX-001

Question #: 72
Topic #: 1

A network load balancer is not correctly validating a client TLS certificate. The network architect needs to validate the certificate installed on the load balancer before progressing. Which of the following commands should the architect use to confirm whether the private key and certificate match?

A. openssl-list -noout -modulus -in cert.crt | openssl md5
openssl rsa -noout -modulus -in privkey.txt | openssl md5
B. openssl req -in certificate.csr -verify
openssl-verify -noout -modulus -in privkey.txt | openssl md5
C. openssl-rsa -noout -modulus -in cert.crt | openssl md5
openssl-verify -noout -modulus -in privkey.txt | openssl md5
D. openssl x509 -noout -modulus -in cert.crt | openssl md5
openssl rsa -noout -modulus -in privkey.txt | openssl md5

Show Suggested Answer

Suggested Answer: D 🗳️

by SuntzuLegacy at May 19, 2025, 3:44 a.m.

Comments

Submit Cancel

SuntzuLegacy

1 month, 1 week ago

Selected Answer: D

Answer: D. nginx openssl x509 -noout -modulus -in cert.crt | openssl md5 openssl rsa -noout -modulus -in privkey.txt | openssl md5 When both commands produce the same hash, the certificate and private key match.

upvoted 1 times

...