Palo Alto Networks Exam PSE-Endpoint Topic 2 Question 87 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 87
Topic #: 2

During installation of the ESM and the agent, SSL was enabled on an endpoint. However, the agent communication is failing. The services.log on the endpoint has the following error.

*An error occurred while making the HTTP request to https: //hostname:2125/CyveraServer/. This could be due to the fact that the server certificate is not configured property with HTTP SYS in the HTTPS case. This could also be caused by a mismatch of the security binding between the client and the server."

Which certificate can be imported on the endpoint to solve this issue? Assume the hostname is a valid FQDN and the ESM Server and Console have different certificates.

AESM Server Public Certificate

BESM Server Serf-Signed Certificate

CESM Console Self-Signed Certificate

DESM Console Public Certificate

Show Suggested Answer

Suggested Answer: B

by Anna at May 02, 2025, 12:07 AM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ena

23 days ago

Haha, I bet the person who wrote this question was having a laugh. 'Server certificate not configured properly' - classic IT problem! I'd go with option (A), but who knows, maybe the joke's on us and the real answer is (C).

upvoted 0 times

...

William

1 months ago

Well, this is a tricky one. The error message suggests a mismatch in the security binding, so I'm guessing the ESM Server Self-Signed Certificate (B) might be the answer. But I could be wrong, this stuff can be so confusing!

upvoted 0 times

Lonna

2 days ago

I see your point, but what if the issue is actually with the ESM Console Public Certificate (D)? That could also potentially solve the problem.

upvoted 0 times

...

Katheryn

5 days ago

I'm not so sure about that. Maybe the ESM Server Public Certificate (A) would be a better option to import on the endpoint.

upvoted 0 times

...

Rebbeca

22 days ago

I think you might be onto something with the ESM Server Self-Signed Certificate (B). It could help with the security binding mismatch.

upvoted 0 times

...

Shenika

1 months ago

Hmm, I'm not sure. The question mentions that the ESM Server and Console have different certificates, so I'm leaning towards the ESM Console Public Certificate (D) as the solution.

upvoted 0 times

Ira

2 days ago

I agree with you, the ESM Console Public Certificate (D) seems like the right choice here.

upvoted 0 times

...

Georgiann

3 days ago

I believe the ESM Server Self-Signed Certificate (B) could work in this case.

upvoted 0 times

...

Ashlyn

8 days ago

I think the ESM Server Public Certificate (A) might be the one needed.

upvoted 0 times

...

Natalie

1 months ago

But the error message mentions a mismatch of security binding, so maybe the ESM Console Public Certificate is needed.

upvoted 0 times

...

Rana

2 months ago

I disagree, I believe the ESM Server Self-Signed Certificate is the correct one.

upvoted 0 times

...

Natalie

2 months ago

I think the ESM Server Public Certificate should be imported.

upvoted 0 times

...

Francene

2 months ago

The error message indicates that the server certificate is not configured properly. I think the ESM Server Public Certificate (A) is the correct answer to solve this issue.

upvoted 0 times

Georgeanna

23 days ago

Yes, importing the ESM Server Public Certificate (A) should help resolve the communication issue.

upvoted 0 times

...

Fernanda

25 days ago

I agree, the error message suggests that the server certificate needs to be configured properly.

upvoted 0 times

...

Virgina

1 months ago

I think the ESM Server Public Certificate (A) should be imported on the endpoint.

upvoted 0 times

...