Question

You are deploying a network automation web service that must present a CA-signed TLS certificate to clients. You have generated a 2048-bit RSA private key on the server. Which sequence correctly describes the next steps to obtain and deploy the CA-signed certificate?

Accepted Answer

Generate a CSR from the private key, submit the CSR to the CA, receive the signed certificate, then install the signed certificate and the CA chain on the server alongside the existing private key.

Answer

Send the private key to the CA, wait for the CA to return a signed certificate, then install only the signed certificate on the server.

Answer

Generate a self-signed certificate from the private key, submit it to the CA for counter-signing, then replace the private key with the CA-issued key.

Answer

Generate a CSR, embed the private key inside the CSR, submit both to the CA, and install the returned bundle that includes a new CA-generated private key.