
An administrator needs to craft a single certificate-signing request for a web-server certificate. The server should be able to use the following identities to mutually authenticate other resources over TLS:
* wwwJnt.comptia.org
* webserver01.int.comptia.org
*10.5.100.10
Which of the following certificate fields must be set properly to support this objective?
Correct Answer: A
The Subject Alternative Name (SAN) field in an X.509 certificate specifies additional hostnames, FQDNs, or IP addresses that the certificate will secure. To allow mutual TLS authentication for multiple hostnames and an IP address, these identities must be included in the SAN field.
* Organizational Unit (B) is an informational attribute, not related to TLS authentication.
* Extended Key Usage (C) defines purpose (e.g., serverAuth, clientAuth) but not hostnames.
* "Certificate extension" (D) is a generic term; SAN is the specific required extension.