Describe How to Troubleshoot Invalid Certificates F5N4 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A certificate for a staging server was issued with a validity period of 90 days. The administrator wants to check if the certificate is still valid before deploying it to production. The current date is June 15, 2024. The certificate's `notBefore` is March 17, 2024, and `notAfter` is June 15, 2024. What is the status of the certificate?

   • AThe certificate expires today and should be considered invalid for production use.
   • BThe certificate expired yesterday.
   • CThe certificate is not yet valid.
   • DThe certificate is valid for the entire day and can be deployed.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In NGINX configuration, which directive specifies the file containing the server certificate?

   • Assl_certificate_key
   • Bssl_certificate
   • Cssl_protocols
   • Dssl_client_certificate
   Reveal Solution Discussion Select an answer first
4. 18expert · hard · select all that apply

   A user reports a browser warning when accessing https://secure.example.com. The administrator runs `openssl s_client -connect secure.example.com:443 -servername secure.example.com` and observes the following: the certificate is expired, the SAN includes secure.example.com, and the issuer is an internal CA not present in the browser's trust store. Select all the issues that apply to this certificate.

   • AThe certificate chain is incomplete.
   • BThe certificate is issued by an untrusted CA.
   • CThe certificate has a hostname mismatch.
   • DThe certificate is expired.
   Check answers Discussion Select an answer first
5. 19expert · hard

   An NGINX server was recently migrated from a physical server to a new VM. The certificate and key files were copied to the new server. Clients now report that the certificate is invalid, but the certificate is not expired and the hostname matches. The old server still works. What is the most likely cause?

   • AThe private key does not match the certificate on the new server.
   • BThe certificate file is corrupted during the copy.
   • CThe new server has a different hostname than the certificate's SAN.
   • DThe certificate chain file was not copied, so the intermediate certificate is missing.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A user reports that their browser displays a warning when accessing a website. Which of the following is a common indicator of an invalid TLS certificate?

   • AThe website's URL changes from HTTPS to HTTP automatically.
   • BThe website loads slowly and images fail to render.
   • CThe browser shows a security exception page with a message about the certificate.
   • DThe browser displays a pop-up asking for a username and password.
   Reveal Solution Discussion Select an answer first