New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CyberArk SECRET-SEN Exam - Topic 1 Question 12 Discussion

Actual exam question for CyberArk's SECRET-SEN exam
Question #: 12
Topic #: 1
[All SECRET-SEN Questions]

You start up a Follower and try to connect to it with a REST call using the server certificate, but you get an SSL connection refused error.

What could be the problem and how should you fix it?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Helene at Apr 12, 2024, 07:05 AM

Limited Time Offer

25%

Off

Get Premium SECRET-SEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Dolores
3 months ago
Port 443 being blocked is also a common problem, worth checking.
upvoted 0 times
...
Leoma
4 months ago
Wait, are you sure the certificate is unnecessary? That seems risky!
upvoted 0 times
...
Stefany
4 months ago
Nah, it could just be a firewall blocking the port.
upvoted 0 times
...
Stephaine
4 months ago
I agree, the hostname needs to be in the certificate.
upvoted 0 times
...
Crissy
4 months ago
Sounds like a SAN issue, definitely check that.
upvoted 0 times
...
Reiko
5 months ago
I recall that SSL certificates are important for secure connections, but I wonder if there are cases where you can bypass them. Is that what option D is suggesting?
upvoted 0 times
...
Nakita
5 months ago
I'm not entirely sure, but I feel like port 443 being blocked could be a possibility too. We did cover different ports in class.
upvoted 0 times
...
Kelvin
5 months ago
I think there was a practice question about firewall issues. If the PostgreSQL ports are blocked, that might also lead to connection problems, right?
upvoted 0 times
...
Anjelica
5 months ago
I remember something about the Subject Alternative Name in certificates. If the Follower's hostname isn't listed, that could definitely cause an SSL error.
upvoted 0 times
...
Melissa
5 months ago
Hmm, I'm not sure about that. The question also mentions the PostgreSQL ports, so it could be a firewall issue. I might try option B and check if those ports are blocked.
upvoted 0 times
...
Kattie
5 months ago
Okay, let's see here. The question mentions an SSL connection refused error, so it seems like there's a problem with the certificate. I'll need to check the certificate details and make sure the hostname is correct.
upvoted 0 times
...
Van
5 months ago
Hmm, this looks like a tricky SSL connection issue. I'll need to carefully consider the possible causes and solutions.
upvoted 0 times
...
Sylvia
5 months ago
Ah, I think I know what the issue is. The certificate probably doesn't have the Follower hostname listed as a Subject Alternative Name (SAN). I'll go with option A and generate a new certificate for the Follower.
upvoted 0 times
...
Mattie
5 months ago
The Clipboard tool? That doesn't sound right. I'm guessing it's one of the other options, but I'm a bit confused on the exact tool for this task. Gotta review my accessibility knowledge.
upvoted 0 times
...
Sonia
5 months ago
I think the answer might be A, the Work center file, since it usually contains details about capacities and times.
upvoted 0 times
...
Refugia
6 months ago
Ugh, stakeholder analysis questions are the worst. There are so many different types of stakeholders to keep track of. I'll just have to read through the options and go with my best guess.
upvoted 0 times
...
Keshia
10 months ago
Wait, there's a PostgreSQL port involved? I thought this was a Follower issue. Now I'm even more confused.
upvoted 0 times
Lang
9 months ago
C) Port 443 is blocked; open that port.
upvoted 0 times
...
Josphine
9 months ago
B) One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.
upvoted 0 times
...
Tabetha
10 months ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
...
Adelle
10 months ago
I bet the person who came up with option D is the same one who thought putting a 'Please Hack Me' sign on their server was a good idea.
upvoted 0 times
Kristel
10 months ago
C) Port 443 is blocked; open that port.
upvoted 0 times
...
Patria
10 months ago
B) One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.
upvoted 0 times
...
Stevie
10 months ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
...
Latrice
11 months ago
D? Really? Using the command option to suppress SSL certificate checking seems like a bad idea. That's just asking for security issues.
upvoted 0 times
Ronny
9 months ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
Edna
9 months ago
C) Port 443 is blocked; open that port.
upvoted 0 times
...
Carole
10 months ago
B) One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.
upvoted 0 times
...
Cletus
10 months ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
Alaine
10 months ago
B) One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.
upvoted 0 times
...
Sharen
10 months ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
...
Yoko
11 months ago
Interesting, I was leaning towards B, but now I'm not so sure. Maybe the firewall is blocking the wrong ports.
upvoted 0 times
...
Rutha
11 months ago
I think we should also check if Port 443 is blocked and open that port as a potential solution.
upvoted 0 times
...
Omega
11 months ago
Hmm, I think the answer is A. The certificate needs to have the Follower hostname as a SAN. Generating a new certificate should fix this.
upvoted 0 times
Alishia
9 months ago
Thanks for the help, I'll generate a new certificate with the correct SAN.
upvoted 0 times
...
Raymon
9 months ago
Yes, that's correct. Make sure the Follower hostname is included in the certificate.
upvoted 0 times
...
Felix
10 months ago
Generating a new certificate should fix this.
upvoted 0 times
...
Galen
11 months ago
I think the answer is A. The certificate needs to have the Follower hostname as a SAN.
upvoted 0 times
...
...
Jutta
11 months ago
I agree with Leah. Generating a new certificate for the Follower could fix the issue.
upvoted 0 times
...
Leah
11 months ago
I think the problem might be with the certificate not containing the Follower hostname as a SAN.
upvoted 0 times
...

Save Cancel