300-430 Question #176: Real Exam Question with Answer & Explanation

The correct answer is C: Public-Signed SAN. A Public-Signed SAN (Subject Alternative Name) certificate allows multiple domain names to be protected with a single certificate. This is useful in a distributed environment like a guest portal on Cisco ISE, where there may be multiple nodes with different Common Names (CNs). Us

Question

An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch. Which certificate type helps resolve this issue?

Options

APublic-Signed Root
BSelf-Signed Standard
CPublic-Signed SAN
DSelf-Signed Wildcard

Explanation

A Public-Signed SAN (Subject Alternative Name) certificate allows multiple domain names to be protected with a single certificate. This is useful in a distributed environment like a guest portal on Cisco ISE, where there may be multiple nodes with different Common Names (CNs). Using a SAN certificate can prevent CN mismatch errors during SSL/TLS handshakes.

Community Discussion

No community discussion yet for this question.

Full 300-430 Practice