A service should be provided to arbitrary clients on the Internet using HTTPS. Any standard client on the Internet should be able to consume the service without further configuration. Which of the following approaches can be used to implement these requirements? (Choose three correct answers.)
Suggested Answer: A
Get Premium 701-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
35 comments · newest first
CR
Cristy
11 months ago
D sounds like a bad idea. Why would you want plain HTTP?
KA
Katy
11 months ago
Wait, self-signed certs? Aren't they risky for public use?
LI
Ling
11 months ago
A is a big no-no! No cert means no security.
MI
Mica
12 months ago
I think E is a solid choice too! Wildcard certs save time.
CH
Chanel
12 months ago
Option C is definitely the way to go for secure deployments.
LA
Lashaunda
12 months ago
I feel like the load balancer option could work, but it might expose some security risks by sending requests in plain HTTP.
XO
Xochitl
1 year ago
I practiced a similar question where using a wildcard certificate seemed like a good choice for multiple subdomains.
LI
Lili
1 year ago
I think using a certificate issuing service is a good option, but I'm not sure if it’s necessary for every deployment.
PA
Paulene
1 year ago
I remember that using self-signed certificates isn't ideal for public services since clients won't trust them by default.
TA
Tawanna
1 year ago
Generating self-signed certs or using a certificate service both seem like viable options to meet the requirements. I'll weigh the pros and cons of each.
AL
Alex
1 year ago
I'm feeling a bit lost on this one. I'll need to review the material on SSL/TLS certificates before attempting to answer.
LO
Louisa
1 year ago
Okay, let's see - I know we need to use HTTPS, so options A and D are out. That leaves B, C, and E as the possible answers.
KE
Kenny
1 year ago
Hmm, I'm a bit unsure about the different certificate options here. I'll need to think it through carefully.
PA
Paz
1 year ago
This question seems straightforward, I think I can handle it.
SH
Shawnna
1 year ago
Okay, let me think this through. If the Active property is cleared or not enabled, then the transformation becomes passive. So I think the answer is A.
HE
Hester
1 year ago
I'm cracking up at the idea of a web server without a certificate. That's like trying to secure your house with a screen door made of tissue paper.
GE
Gerri
1 year ago
User 3: E) Install a wildcard certificate and the respective private key on all the backend servers sounds like a better choice.
LI
Lisandra
1 year ago
User 2: Lisandra, that's definitely not a secure option.
JA
Janae
1 year ago
User 1: A) Configure the web servers to not use a server certificate when serving HTTPS.
KE
Kerry
2 years ago
Wait, so you're telling me I can't just leave the web servers without a certificate? That seems like a lot of work!
ER
Erick
1 year ago
User 3: Or you could use a certificate issuing service to request certificates.
EL
Eleonora
1 year ago
User 2: You could generate self-signed certificates during deployment.
DO
Donette
1 year ago
User 1: No, you can't leave the web servers without a certificate.
MA
Maile
2 years ago
I think Option E is the way to go. A wildcard certificate would make it easy to deploy new backend servers without having to worry about certificates.
JE
Jeanice
1 year ago
I agree, having a wildcard certificate would make managing certificates much easier.
JE
Jeanice
1 year ago
Option E is definitely a good choice. It would simplify the deployment process for sure.
ED
Edna
2 years ago
I'm not sure about option A though. Configuring web servers to not use a server certificate for HTTPS doesn't sound secure to me.
KA
Kami
2 years ago
Option D looks tempting, but I'm worried that decrypting the requests on the load balancer might introduce a security vulnerability.
DA
Davida
2 years ago
I agree with Isadora. Option E also seems like a good approach as it allows for a wildcard certificate to be installed on all backend servers.
KI
Kizzy
2 years ago
Option B and C seem like the most secure options, but I'm not sure if a self-signed certificate would be accepted by all clients on the internet.
LA
Lashawn
1 year ago
Self-signed certificates may not be trusted by all clients, so using a certificate issuing service could be a better option.
AP
Apolonia
1 year ago
E) Install a wildcard certificate and the respective private key on all the backend servers.
ER
Erin
1 year ago
C) Use a certificate issuing service to request certificates during each server deployment.
AL
Aleta
1 year ago
B) Generate a self-signed certificates during the deployment of each backend server.
IS
Isadora
2 years ago
I think option C is a good choice because it ensures that certificates are requested during server deployment.