Which of the following are the MOST secure states for the certificate authority server when it is not in use?

While implementing a PKI for a company, a security analyst plans to utilize a dedicated server as the certAcate authority that is only used to sign intermediate certificates.

Which of the following are the MOST secure states for the certificate authority server when it is not in use? (Select TWO)
A . On a private VLAN
B . Full disk encrypted
C . Powered off
D . Backed up hourly
E . VPN accessible only
F . Air gapped

View Answer

Answer: C, F

Explanation:

The most secure states for the certificate authority server when it is not in use are powered off and air gapped. Powering off the server will prevent any unauthorized access or tampering with the server while it is idle. Air gapping the server will isolate it from any network connections, making it inaccessible to remote attackers or malware. These measures will help to protect the integrity and confidentiality of the certificate authority server and its keys.