nerdexam
Cisco

350-001 · Question #188

If a certificate authority trustpoint is not configured when enabling HTTPS and the remote HTTPS server requires client authentication, connections to the secure HTTP client will fail. Which command…

The correct answer is D. ip http client secure-trustpoint trustpoint-name. IP http client secure-trustpoint To specify the remote certificate authority (CA) trustpoint that should be used if certification is needed for the secure HTTP client, use the ip http client secure-trustpoint command in global configuration mode. To remove a client trustpoint…

Security

Question

If a certificate authority trustpoint is not configured when enabling HTTPS and the remote HTTPS server requires client authentication, connections to the secure HTTP client will fail. Which command must be enabled for correct operation?

Options

  • Aip http client secure-ciphersuite 3des-ede-cbc-sha
  • Bip https max-connections 10
  • Cip http timeout-policy idle 30 life 120 requests 100
  • Dip http client secure-trustpoint trustpoint-name

How the community answered

(26 responses)
  • A
    8% (2)
  • C
    4% (1)
  • D
    88% (23)

Explanation

IP http client secure-trustpoint To specify the remote certificate authority (CA) trustpoint that should be used if certification is needed for the secure HTTP client, use the ip http client secure-trustpoint command in global configuration mode. To remove a client trustpoint from the configuration, use the no form of this IP http client secure-trustpoint trustpoint-name

Topics

#HTTPS client#certificate trustpoint#PKI#secure HTTP

Community Discussion

No community discussion yet for this question.

Full 350-001 Practice