Production web servers should use certificates issued by trusted Certificate Authorities (CAs).
B is correct: This describes the proper process—generate a private key, create a CSR (Certificate Signing Request), send it to a CA, and use the returned signed certificate for HTTPS.
Incorrect Options:
A: SSH keys are for SSH, not HTTPS/TLS.
C: Self-signed certs are insecure in production.
D: Irrelevant to HTTPS; /dev/random is used for entropy generation.
[Reference:, CompTIA Linux+ XK0-005 Study Guide, Chapter 11, man openssl, ]
Submit