350-601 · Question #370
An engineer must affirm the identity of the Cisco UCS Manager after a valid CA-signed keyring for HTTPS access is created. Which action completes the configuration?
The correct answer is B. Create a trusted point. To affirm the identity of Cisco UCS Manager after creating a CA-signed keyring for HTTPS, a trusted point must be created. This step allows UCS Manager to validate the CA's certificate.
Question
An engineer must affirm the identity of the Cisco UCS Manager after a valid CA-signed keyring for HTTPS access is created. Which action completes the configuration?
Options
- ASet Cipher Suite Mode
- BCreate a trusted point
- CImplement SSLv3
- DEnable TLSv1.2
How the community answered
(44 responses)- B93% (41)
- C2% (1)
- D5% (2)
Why each option
To affirm the identity of Cisco UCS Manager after creating a CA-signed keyring for HTTPS, a trusted point must be created. This step allows UCS Manager to validate the CA's certificate.
Setting the Cipher Suite Mode configures the cryptographic algorithms used for SSL/TLS, but it does not affirm the identity of the UCS Manager itself.
Creating a trusted point involves importing the Certificate Authority's root and intermediate certificates into Cisco UCS Manager. This allows the system to build a chain of trust and validate the identity presented by its own CA-signed certificate for HTTPS.
Implementing SSLv3 is an outdated and insecure protocol that should not be used for modern secure communications, and it does not directly affirm identity.
Enabling TLSv1.2 configures the version of the TLS protocol to use for secure communication, but it does not establish trust for the server's certificate.
Concept tested: UCS Manager HTTPS identity verification, trusted point
Source: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/gui-reference/config-guide-UCSM-4-1/b_Cisco_UCS_Manager_GUI_Configuration_Guide_4_1/b_Cisco_UCS_Manager_GUI_Configuration_Guide_4_1_chapter_01101.html#d24969e210a1639
Topics
Community Discussion
No community discussion yet for this question.