ISC2 CAP Exam - Topic 8 Question 64 Discussion

Actual exam question for ISC2's CAP exam

Question #: 64
Topic #: 8

[All CAP Questions]

A website administrator forgot to renew the TLS certificate on time and as a result, the application is now displaying a TLS error message. However, on closer inspection, it appears that the error is due to the TLS certificate expiry.

In the scenario described above, which of the following is correct?

AThere is no urgency to renew the certificate as the communication is still over TLS

BThere is an urgency to renew the certificate as the users of the website may get conditioned to ignore TLS warnings and therefore ignore a legitimate warning which could be a real Man-in-the-Middle attack

Show Suggested Answer

Suggested Answer: A

by My at Feb 27, 2023, 01:41 PM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Raymon

5 months ago

I thought TLS was supposed to protect us, why let it expire?

upvoted 0 times

...

Aja

5 months ago

No urgency? That's a bad take, we need to keep users safe!

upvoted 0 times

...

Kendra

6 months ago

Wait, are people really conditioned to ignore TLS warnings?

upvoted 0 times

...

Dawne

6 months ago

Agreed, ignoring those warnings is risky.

upvoted 0 times

...

Tamekia

6 months ago

Definitely need to renew that certificate ASAP!

upvoted 0 times

...

Raina

6 months ago

I’m a bit confused; I thought as long as the connection was still encrypted, it wouldn’t matter if the certificate expired.

upvoted 0 times

...

Mari

6 months ago

I feel like I’ve seen a similar question in practice exams, and I think the urgency to renew is definitely a key point.

upvoted 0 times

...

Charolette

6 months ago

I think option B makes sense because users might get used to ignoring warnings, which could lead to serious security risks later on.

upvoted 0 times

...

Arlie

6 months ago

I remember studying about TLS certificates and their importance, but I'm not entirely sure if the urgency is as high as it seems.

upvoted 0 times

...

Aileen

6 months ago

Okay, let me think this through. The code is creating a list and adding some names to it. I'll need to pay close attention to the order of the names.

upvoted 0 times

...

Kristal

6 months ago

Hmm, I'm a bit confused. I thought the 10.0.0.0 - 10.0.0.255 range was for private IP addresses, not for automatic DHCP assignment. I'll need to double-check my notes on this.

upvoted 0 times

...

Zena

11 months ago

The website admin must have been out celebrating their birthday or something. Clearly, they dropped the ball on this one. Time to get that certificate squared away before the whole site goes up in flames!

upvoted 0 times

...

Shaun

11 months ago

Option A? Really? That's like saying 'Hey, let's just leave the front door wide open, what could go wrong?' Definitely gotta get that certificate renewed ASAP.

upvoted 0 times

Thora

10 months ago

I'll take care of renewing the certificate right away.

upvoted 0 times

...

Shawna

10 months ago

Let's make sure this doesn't happen again in the future.

upvoted 0 times

...

Sean

10 months ago

Yeah, we can't risk users ignoring important warnings because of this.

upvoted 0 times

...

Josefa

10 months ago

I agree, we definitely need to renew the certificate as soon as possible.

upvoted 0 times

...

Catherin

11 months ago

I'm with the website admin on this one - renewing the certificate is a must. Letting it expire is like forgetting to put gas in the car before a long road trip. Not a good look.

upvoted 0 times

...

Broderick

11 months ago

Option B is the way to go, my friend. We don't want users getting too comfortable with ignoring those warnings, or they might miss the real deal and end up in a spy movie plot.

upvoted 0 times

Danica

10 months ago

User 3: It's important to keep the certificate up to date to maintain security for our users.

upvoted 0 times

...

Teddy

10 months ago

User 2: I agree, we need to make sure users take TLS warnings seriously to protect their data.

upvoted 0 times

...

Gerald

10 months ago

User 1: Option B is definitely the right choice. We can't risk users ignoring important warnings.

upvoted 0 times

...

Mariann

12 months ago

Ah, the classic TLS certificate expiry issue. Gotta renew that bad boy before the website turns into a ghost town - no one wants to brave those scary TLS warnings these days!

upvoted 0 times

Laquanda

10 months ago

B: Absolutely, let's not take any chances with security.

upvoted 0 times

...

Mindy

10 months ago

A: We should make sure to renew it promptly to keep the website secure.

upvoted 0 times

...

Lyla

10 months ago

B: I agree, users might start ignoring warnings and that could lead to a serious security breach.

upvoted 0 times

...

Shawnee

10 months ago

A: Definitely! It's important to renew the TLS certificate to avoid any security risks.

upvoted 0 times

...

Lashon

10 months ago

Definitely, ignoring TLS warnings can lead to serious security risks.

upvoted 0 times

...

Vallie

10 months ago

I agree, it's important to renew the certificate to maintain trust with users.

upvoted 0 times

...

Francoise

10 months ago

B) There is an urgency to renew the certificate as the users of the website may get conditioned to ignore TLS warnings and therefore ignore a legitimate warning which could be a real Man-in-the-Middle attack

upvoted 0 times

...