nerdexam
Cisco

350-601 · Question #370

An engineer must affirm the identity of the Cisco UCS Manager after a valid CA-signed keyring for HTTPS access is created. Which action completes the configuration?

The correct answer is B. Create a trusted point. To affirm the identity of Cisco UCS Manager after creating a CA-signed keyring for HTTPS, a trusted point must be created. This step allows UCS Manager to validate the CA's certificate.

Security

Question

An engineer must affirm the identity of the Cisco UCS Manager after a valid CA-signed keyring for HTTPS access is created. Which action completes the configuration?

Options

  • ASet Cipher Suite Mode
  • BCreate a trusted point
  • CImplement SSLv3
  • DEnable TLSv1.2

How the community answered

(44 responses)
  • B
    93% (41)
  • C
    2% (1)
  • D
    5% (2)

Why each option

To affirm the identity of Cisco UCS Manager after creating a CA-signed keyring for HTTPS, a trusted point must be created. This step allows UCS Manager to validate the CA's certificate.

ASet Cipher Suite Mode

Setting the Cipher Suite Mode configures the cryptographic algorithms used for SSL/TLS, but it does not affirm the identity of the UCS Manager itself.

BCreate a trusted pointCorrect

Creating a trusted point involves importing the Certificate Authority's root and intermediate certificates into Cisco UCS Manager. This allows the system to build a chain of trust and validate the identity presented by its own CA-signed certificate for HTTPS.

CImplement SSLv3

Implementing SSLv3 is an outdated and insecure protocol that should not be used for modern secure communications, and it does not directly affirm identity.

DEnable TLSv1.2

Enabling TLSv1.2 configures the version of the TLS protocol to use for secure communication, but it does not establish trust for the server's certificate.

Concept tested: UCS Manager HTTPS identity verification, trusted point

Source: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/gui-reference/config-guide-UCSM-4-1/b_Cisco_UCS_Manager_GUI_Configuration_Guide_4_1/b_Cisco_UCS_Manager_GUI_Configuration_Guide_4_1_chapter_01101.html#d24969e210a1639

Topics

#HTTPS#Certificate Management#Trusted Point#Cisco UCS Manager

Community Discussion

No community discussion yet for this question.

Full 350-601 Practice