Palo Alto Networks Exam PSE-Endpoint Topic 2 Question 85 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 85
Topic #: 2

During installation of the ESM and the agent, SSL was enabled on an endpoint. However, the agent communication is failing. The services.log on the endpoint has the following error.

*An error occurred while making the HTTP request to https: //hostname:2125/CyveraServer/. This could be due to the fact that the server certificate is not configured property with HTTP SYS in the HTTPS case. This could also be caused by a mismatch of the security binding between the client and the server."

Which certificate can be imported on the endpoint to solve this issue? Assume the hostname is a valid FQDN and the ESM Server and Console have different certificates.

AESM Server Public Certificate

BESM Server Serf-Signed Certificate

CESM Console Self-Signed Certificate

DESM Console Public Certificate

Show Suggested Answer

Suggested Answer: B

by William at Mar 22, 2025, 04:24 AM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Chau

2 hours ago

I bet the developer who wrote this code was having a bad day. But hey, at least it's not a production issue, right? *chuckles* Anyway, I think A) ESM Server Public Certificate is the way to go.

upvoted 0 times

...

Alba

5 days ago

But the error message mentions a mismatch of security binding, so maybe the ESM Console Public Certificate is needed.

upvoted 0 times

...

Luke

5 days ago

This reminds me of that time I forgot to update the SSL certificates on my server. It was a nightmare! Anyway, I'm going with A) ESM Server Public Certificate as the solution.

upvoted 0 times

...

Gilma

9 days ago

I disagree, I believe the ESM Server Self-Signed Certificate is the correct one.

upvoted 0 times

...

Jerry

11 days ago

Hmm, this seems like a tricky one. But the clue is in the error message - it's related to the server certificate, not the console. So, A) ESM Server Public Certificate is my pick.

upvoted 0 times

...

Yuki

13 days ago

Ah, the age-old SSL/TLS issue. I bet this has happened to everyone at least once. Let's see, the problem is a mismatch between the client and server security bindings. I'd go with A) ESM Server Public Certificate.

upvoted 0 times

...

Tennie

17 days ago

The error message indicates that the server certificate is not configured properly with HTTP SYS. So, I think the correct answer is A) ESM Server Public Certificate.

upvoted 0 times

...

Alba

28 days ago

I think the ESM Server Public Certificate should be imported.

upvoted 0 times

...