A client receives a 'hostname mismatch' error when connecting to a server. What is the most likely cause?

The server's private key does not match the certificate

The certificate's Common Name (CN) or Subject Alternative Name (SAN) does not match the hostname used to connect

The certificate chain is incomplete

What is the purpose of configuring a cipher suite in SSL/TLS?

To determine which certificate authority issued the certificate

To specify the server's hostname for the connection

To set the certificate's validity period

To specify the encryption algorithms and key exchange methods used for the connection

What is the purpose of a Certificate Signing Request (CSR)?

To revoke an existing certificate

To verify a server's identity during the TLS handshake

To encrypt data between a client and server

To request a certificate from a Certificate Authority

A security team is configuring a web server to support a legacy client that only supports TLS 1.0, but the organization's security policy requires disabling TLS 1.0 and 1.1. The team must balance compatibility with security. Which approach should the team take?

Enable TLS 1.0 only for the legacy client's IP address using a separate virtual host

Disable TLS 1.0 and 1.1, and require the legacy client to be updated or replaced

Enable TLS 1.0 and 1.1 globally to ensure compatibility

Use a reverse proxy that translates TLS 1.0 to TLS 1.2

A Windows-based application requires an SSL certificate in PKCS#12 format, but the certificate was provided as a PEM file and a separate private key. The administrator needs to convert the certificate to PKCS#12. Which OpenSSL command should be used?

openssl rsa -in key.pem -out key.pfx

openssl x509 -in cert.pem -out cert.pfx -outform DER

openssl req -new -x509 -key key.pem -out cert.pfx -days 365

openssl pkcs12 -export -out cert.pfx -inkey key.pem -in cert.pem

CiscoCertified DevNet Professional

Domain 4Objective 9

Configure Application Specific SSL Certificates 350-901 Practice Questions (Page 3)

Part of the 4.0 Application Deployment and Security domain, which accounts for 20% of the 350-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

20%of the exam

Questions 11–15

11foundation · easy
A client receives a 'hostname mismatch' error when connecting to a server. What is the most likely cause?
Select an answer first
12foundation · easy
What is the purpose of configuring a cipher suite in SSL/TLS?
Select an answer first
13foundation · easy
What is the purpose of a Certificate Signing Request (CSR)?
Select an answer first
14expert · hard
A security team is configuring a web server to support a legacy client that only supports TLS 1.0, but the organization's security policy requires disabling TLS 1.0 and 1.1. The team must balance compatibility with security. Which approach should the team take?
Select an answer first
15application · medium
A Windows-based application requires an SSL certificate in PKCS#12 format, but the certificate was provided as a PEM file and a separate private key. The administrator needs to convert the certificate to PKCS#12. Which OpenSSL command should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-901” is a trademark of its owner, used for identification only.