A server is configured with a valid certificate, but clients are reporting that the connection is not secure. The administrator checks the server and sees that the certificate is valid and the chain is correct. However, the server is still using SSLv3. What is the most likely cause of the security warning?

The server is missing the intermediate certificate

The server is using SSLv3, which is considered insecure and triggers browser warnings

The certificate is not trusted by the client

An administrator is creating a CSR for a new web server. The server will be accessible at both www.example.com and example.com. The administrator wants to ensure that the certificate is valid for both hostnames. What should the administrator include in the CSR?

Generate two separate certificates, one for each hostname

Set the Common Name (CN) to www.example.com and the Subject Alternative Name to example.com

Use a wildcard certificate for *.example.com

Add both hostnames as Subject Alternative Names (SANs) in the CSR

Which OpenSSL command creates a new private key and a CSR?

openssl req -new -newkey rsa:2048 -nodes -keyout key.pem -out request.csr

openssl x509 -req -in request.csr -signkey key.pem -out cert.pem

openssl genrsa -out key.pem 2048

openssl s_client -connect example.com:443

What does the 'certificate chain incomplete' error indicate?

The certificate's hostname does not match

The certificate's private key is missing

The server did not send all intermediate certificates needed to validate the chain to a trusted root

CiscoCertified DevNet Professional

Domain 4Objective 9

Configure Application Specific SSL Certificates 350-901 Practice Questions (Page 6)

Part of the 4.0 Application Deployment and Security domain, which accounts for 20% of the 350-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

20%of the exam

Questions 26–30

26expert · hard
A server is configured with a valid certificate, but clients are reporting that the connection is not secure. The administrator checks the server and sees that the certificate is valid and the chain is correct. However, the server is still using SSLv3. What is the most likely cause of the security warning?
Select an answer first
27foundation · easy
Which SSL/TLS protocol version is considered deprecated and should not be enabled on modern servers?
Select an answer first
28application · medium
An administrator is creating a CSR for a new web server. The server will be accessible at both www.example.com and example.com. The administrator wants to ensure that the certificate is valid for both hostnames. What should the administrator include in the CSR?
Select an answer first
29foundation · easy
Which OpenSSL command creates a new private key and a CSR?
Select an answer first
30foundation · easy
What does the 'certificate chain incomplete' error indicate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 350-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-901” is a trademark of its owner, used for identification only.

Configure Application Specific SSL Certificates 350-901 Practice Questions (Page 6)

Questions 26–30

Which SSL/TLS protocol version is considered deprecated and should not be enabled on modern servers?

An administrator is creating a CSR for a new web server. The server will be accessible at both www.example.com and example.com. The administrator wants to ensure that the certificate is valid for both hostnames. What should the administrator include in the CSR?

Which OpenSSL command creates a new private key and a CSR?

What does the 'certificate chain incomplete' error indicate?

Keep studying — 4.0 Application Deployment and Security