An organization is using a PKI management server and a SOAR platform to manage the certificate lifecycle. The SOAR platform queries a certificate management tool to check all endpoints for SSL certificates that have either expired or are nearing expiration. Engineers are struggling to manage problematic certificates outside of PKI management since deploying certificates and tracking them requires searching server owners manually. Which action will improve workflow automation?
Suggested Answer: C
Get Premium 350-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
39 comments · newest first
CR
Craig
11 months ago
C could help identify issues faster, but is it really automated enough?
CA
Cassandra
11 months ago
Surprised they haven't integrated PKI with SOAR already!
CA
Carman
11 months ago
A seems like a lot of manual work still, not sure it’s the right choice.
HE
Hermila
11 months ago
I disagree, I think D could work better for communication.
KR
Kristian
12 months ago
Option B sounds like the best way to streamline everything!
GE
Germaine
12 months ago
I vaguely recall that pulling server owner details from Active Directory could simplify communication, so option D might be a good choice too.
BR
Brittani
1 year ago
I feel like option C could help with visibility, but I'm not entirely confident about how effective it would be in automating the process.
TA
Tammy
1 year ago
I think option B sounds familiar; we practiced something similar about integrating PKI with SOAR to automate certificate management.
CA
Carman
1 year ago
I remember we discussed how integrating SOAR with other systems can streamline workflows, but I'm not sure which option would be the best fit here.
SY
Sylvie
1 year ago
I've got a good feeling about this one. Option D seems like the most straightforward solution, leveraging the integration with Active Directory to automate the email notifications. That should help the engineers stay on top of the problematic certificates.
NA
Nana
1 year ago
This is a great question! I think option A is the best approach, as it allows us to create a more comprehensive workflow that includes incident response and change management. That should help streamline the process and reduce the manual effort required.
AD
Adrianna
1 year ago
Hmm, I'm a bit confused by the wording here. I think option C might be the way to go, but I'm not 100% sure. I'll need to review the question again and make sure I understand the requirements.
DO
Dorothea
1 year ago
Okay, let's see. The key seems to be finding a way to integrate the SOAR platform with the PKI management server more seamlessly. I'm leaning towards option B, but I'll need to double-check the details.
LO
Louvenia
1 year ago
This seems like a tricky one. I'll need to carefully read through the options and think about the best way to automate the certificate management workflow.
CA
Cammy
1 year ago
Based on my understanding of how switch stacks work, I believe the correct answer is B and C. The original master switch should become the new master after the restart, and the original standby switch should become a new slave.
KR
Krystina
1 year ago
I'm a little confused on this one. The question mentions authentication, but the answer choices don't seem to directly match that. I'll have to re-read it carefully and see if I can figure out the right fundamental attribute they're looking for.
FL
Florencia
1 year ago
Hmm, I'm a little unsure about the difference between active and passive investing. I'll need to think this through carefully.
ER
Erinn
1 year ago
I bet the engineers are wishing they could just revoke all the problematic certificates and start over with a clean slate. Ah, the joys of PKI management.
OR
Ora
1 year ago
I'm just hoping the server owners don't respond with a 'certificate, what certificate?' when they get those automated emails.
GE
Gearldine
1 year ago
B) Integrate a PKI solution within SOAR to create certificates within the SOAR engines to track, update, and monitor problematic certificates.
OL
Oliva
1 year ago
D) Integrate a SOAR solution with Active Directory to pull server owner details from the AD and send an automated email for problematic certificates requesting updates.
WA
Wade
1 year ago
C) Implement a new workflow for SOAR to fetch a report of assets that are outside of the PKI zone, sort assets by certification management leads and automate alerts that updates are needed.
BE
Beatriz
1 year ago
A) Implement a new workflow within SOAR to create tickets in the incident response system, assign problematic certificate update requests to server owners, and register change requests.
TE
Telma
1 year ago
Option D sounds like a good way to leverage Active Directory for server owner details. Automating email alerts for problematic certificates is a nice touch.
RE
Remedios
1 year ago
It would definitely streamline the process of requesting updates for certificates.
TW
Twana
1 year ago
Automating email alerts for problematic certificates is a nice touch.
LA
Laurel
1 year ago
Option D sounds like a good way to leverage Active Directory for server owner details.
AM
Amie
2 years ago
That's a valid point, Dion. But I still think option A provides a more practical approach in assigning tasks and managing updates.
AL
Alica
2 years ago
Option C looks interesting, as it focuses on identifying assets outside the PKI zone and automating the update process. This could be a great way to catch those rogue certificates.
TR
Tracey
1 year ago
I agree, automating the identification and update process for certificates outside the PKI zone could really help with efficiency.
NI
Nickole
1 year ago
Option C sounds like a good solution to streamline the certificate management process.
DI
Dion
2 years ago
I disagree, I believe option B is more efficient. Integrating a PKI solution within SOAR will centralize certificate management and monitoring.
RO
Royal
2 years ago
I like the idea of integrating PKI within SOAR in option B. This way, we can manage the entire certificate lifecycle within a single platform, which could be more efficient.
MA
Marylou
2 years ago
Option A seems like the most comprehensive solution, as it covers the entire workflow from ticket creation to assignment and change management. This should definitely improve automation.
LU
Luther
1 year ago
Automating alerts for updates needed on certificates outside of the PKI zone could help ensure that no certificates are overlooked or forgotten.
TO
Tonette
1 year ago
Integrating a PKI solution within SOAR could also be beneficial, as it would allow for better tracking and monitoring of certificates within the platform.
RY
Ryann
1 year ago
I agree, creating tickets and assigning them to server owners will streamline the process of updating problematic certificates.
AN
Antonio
1 year ago
Option A seems like the most comprehensive solution, as it covers the entire workflow from ticket creation to assignment and change management. This should definitely improve automation.
AM
Amie
2 years ago
I think option A is the best choice. It will streamline the process by assigning tasks to server owners and tracking change requests.