CyberArk Exam SECRET-SEN Topic 1 Question 12 Discussion

Actual exam question for CyberArk's SECRET-SEN exam

Question #: 12
Topic #: 1

You start up a Follower and try to connect to it with a REST call using the server certificate, but you get an SSL connection refused error.

What could be the problem and how should you fix it?

AThe certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.

BOne of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.

CPort 443 is blocked; open that port.

DThe certificate is unnecessary. Use the command option to suppress SSL certificate checking.

Show Suggested Answer

Suggested Answer: A

by Helene at Apr 12, 2024, 07:05 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

8 days ago

D? Really? Using the command option to suppress SSL certificate checking seems like a bad idea. That's just asking for security issues.

upvoted 0 times

...

12 days ago

Interesting, I was leaning towards B, but now I'm not so sure. Maybe the firewall is blocking the wrong ports.

upvoted 0 times

...

14 days ago

I think we should also check if Port 443 is blocked and open that port as a potential solution.

upvoted 0 times

...

16 days ago

Hmm, I think the answer is A. The certificate needs to have the Follower hostname as a SAN. Generating a new certificate should fix this.

upvoted 0 times

...

18 days ago

I agree with Leah. Generating a new certificate for the Follower could fix the issue.

upvoted 0 times

...

24 days ago

I think the problem might be with the certificate not containing the Follower hostname as a SAN.

upvoted 0 times

...