U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CyberArk SECRET-SEN Exam - Topic 1 Question 12 Discussion

You start up a Follower and try to connect to it with a REST call using the server certificate, but you get an SSL connection refused error.What could be the problem and how should you fix it?
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
B) One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.
C) Port 443 is blocked; open that port.
D) The certificate is unnecessary. Use the command option to suppress SSL certificate checking.

CyberArk SECRET-SEN Exam - Topic 1 Question 12 Discussion

Actual exam question for CyberArk's SECRET-SEN exam
Question #: 12
Topic #: 1
[All SECRET-SEN Questions]

You start up a Follower and try to connect to it with a REST call using the server certificate, but you get an SSL connection refused error.

What could be the problem and how should you fix it?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Helene at Apr 12, 2024, 07:05 AM

Limited Time Offer

25%

Off

Get Premium SECRET-SEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Dolores
7 months ago
Port 443 being blocked is also a common problem, worth checking.
upvoted 0 times
...
Leoma
7 months ago
Wait, are you sure the certificate is unnecessary? That seems risky!
upvoted 0 times
...
Stefany
7 months ago
Nah, it could just be a firewall blocking the port.
upvoted 0 times
...
Stephaine
7 months ago
I agree, the hostname needs to be in the certificate.
upvoted 0 times
...
Crissy
8 months ago
Sounds like a SAN issue, definitely check that.
upvoted 0 times
...
Reiko
8 months ago
I recall that SSL certificates are important for secure connections, but I wonder if there are cases where you can bypass them. Is that what option D is suggesting?
upvoted 0 times
...
Nakita
8 months ago
I'm not entirely sure, but I feel like port 443 being blocked could be a possibility too. We did cover different ports in class.
upvoted 0 times
...
Kelvin
8 months ago
I think there was a practice question about firewall issues. If the PostgreSQL ports are blocked, that might also lead to connection problems, right?
upvoted 0 times
...
Anjelica
8 months ago
I remember something about the Subject Alternative Name in certificates. If the Follower's hostname isn't listed, that could definitely cause an SSL error.
upvoted 0 times
...
Melissa
8 months ago
Hmm, I'm not sure about that. The question also mentions the PostgreSQL ports, so it could be a firewall issue. I might try option B and check if those ports are blocked.
upvoted 0 times
...
Kattie
8 months ago
Okay, let's see here. The question mentions an SSL connection refused error, so it seems like there's a problem with the certificate. I'll need to check the certificate details and make sure the hostname is correct.
upvoted 0 times
...
Van
8 months ago
Hmm, this looks like a tricky SSL connection issue. I'll need to carefully consider the possible causes and solutions.
upvoted 0 times
...
Sylvia
9 months ago
Ah, I think I know what the issue is. The certificate probably doesn't have the Follower hostname listed as a Subject Alternative Name (SAN). I'll go with option A and generate a new certificate for the Follower.
upvoted 0 times
...
Mattie
9 months ago
The Clipboard tool? That doesn't sound right. I'm guessing it's one of the other options, but I'm a bit confused on the exact tool for this task. Gotta review my accessibility knowledge.
upvoted 0 times
...
Sonia
9 months ago
I think the answer might be A, the Work center file, since it usually contains details about capacities and times.
upvoted 0 times
...
Refugia
9 months ago
Ugh, stakeholder analysis questions are the worst. There are so many different types of stakeholders to keep track of. I'll just have to read through the options and go with my best guess.
upvoted 0 times
...
Keshia
1 year ago
Wait, there's a PostgreSQL port involved? I thought this was a Follower issue. Now I'm even more confused.
upvoted 0 times
Lang
1 year ago
C) Port 443 is blocked; open that port.
upvoted 0 times
...
Josphine
1 year ago
B) One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.
upvoted 0 times
...
Tabetha
1 year ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
...
Adelle
1 year ago
I bet the person who came up with option D is the same one who thought putting a 'Please Hack Me' sign on their server was a good idea.
upvoted 0 times
Kristel
1 year ago
C) Port 443 is blocked; open that port.
upvoted 0 times
...
Patria
1 year ago
B) One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.
upvoted 0 times
...
Stevie
1 year ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
...
Latrice
1 year ago
D? Really? Using the command option to suppress SSL certificate checking seems like a bad idea. That's just asking for security issues.
upvoted 0 times
Ronny
1 year ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
Edna
1 year ago
C) Port 443 is blocked; open that port.
upvoted 0 times
...
Carole
1 year ago
B) One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.
upvoted 0 times
...
Cletus
1 year ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
Alaine
1 year ago
B) One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.
upvoted 0 times
...
Sharen
1 year ago
A) The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.
upvoted 0 times
...
...
Yoko
1 year ago
Interesting, I was leaning towards B, but now I'm not so sure. Maybe the firewall is blocking the wrong ports.
upvoted 0 times
...
Rutha
1 year ago
I think we should also check if Port 443 is blocked and open that port as a potential solution.
upvoted 0 times
...
Omega
1 year ago
Hmm, I think the answer is A. The certificate needs to have the Follower hostname as a SAN. Generating a new certificate should fix this.
upvoted 0 times
Alishia
1 year ago
Thanks for the help, I'll generate a new certificate with the correct SAN.
upvoted 0 times
...
Raymon
1 year ago
Yes, that's correct. Make sure the Follower hostname is included in the certificate.
upvoted 0 times
...
Felix
1 year ago
Generating a new certificate should fix this.
upvoted 0 times
...
Galen
1 year ago
I think the answer is A. The certificate needs to have the Follower hostname as a SAN.
upvoted 0 times
...
...
Jutta
1 year ago
I agree with Leah. Generating a new certificate for the Follower could fix the issue.
upvoted 0 times
...
Leah
1 year ago
I think the problem might be with the certificate not containing the Follower hostname as a SAN.
upvoted 0 times
...

Save Cancel