CAS-005 · Question #454
A cloud security engineer is setting up a cloud-hosted WAF. The engineer needs to implement a solution to protect the multiple websites the organization hosts. The organization websites are…
The correct answer is A. Purchase one SAN certificate. A Subject Alternative Name (SAN) certificate lets you bundle multiple distinct hostnames, including across different domains, in a single TLS certificate. With one SAN cert you can list: wiki.mycompany.org campus.mycompany.com This keeps costs down (versus buying four separate…
Question
A cloud security engineer is setting up a cloud-hosted WAF. The engineer needs to implement a solution to protect the multiple websites the organization hosts. The organization websites are:
campus.mycompany.com wiki.mycompany.org The solution must save costs and be able to protect all websites. Users should be able to notify the cloud security engineer of any on-path attacks. Which of the following is the best solution?
Options
- APurchase one SAN certificate.
- BImplement self-signed certificates.
- CPurchase one certificate for each website.
- DPurchase one wildcard certificate.
How the community answered
(27 responses)- A70% (19)
- B7% (2)
- C19% (5)
- D4% (1)
Explanation
A Subject Alternative Name (SAN) certificate lets you bundle multiple distinct hostnames, including across different domains, in a single TLS certificate. With one SAN cert you can list: wiki.mycompany.org campus.mycompany.com This keeps costs down (versus buying four separate certs) and avoids the domain restriction of a single wildcard, while still providing proper end-to-end HTTPS protection so that any interception triggers a browser warning and alerts users to on-path attacks.
Community Discussion
No community discussion yet for this question.