nerdexam
CompTIA

CV0-003 · Question #888

An organization deployed an application using a cloud provider's internal managed certificates. Developers are unable to retrieve data when calling the API from any machine. The following error messag

The correct answer is D. Root trust. The error message indicates that the SSL/TLS handshake failed due to an invalid certificate. This means that the client machine does not trust the certificate authority (CA) that issued the certificate for the cloud provider's API. A self-signed certificate or an insecure cipher

Troubleshooting

Question

An organization deployed an application using a cloud provider's internal managed certificates. Developers are unable to retrieve data when calling the API from any machine. The following error message is in the log:

12-04-2023-10:05:25, SSL Negotiation Error 12-04-2023-10:05:28, Invalid Certificate 12-04-2023-10:05:29, TLS Handshake Failed 12-04-2023-10:05:30, Connection Closed Which of the following is the most likely cause of the error?

Options

  • ATLS version
  • BInsecure cipher
  • CSelf-signed certificate
  • DRoot trust

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    14% (3)
  • C
    5% (1)
  • D
    76% (16)

Explanation

The error message indicates that the SSL/TLS handshake failed due to an invalid certificate. This means that the client machine does not trust the certificate authority (CA) that issued the certificate for the cloud provider's API. A self-signed certificate or an insecure cipher would not cause this error, as they would be detected during the certificate validation process. The TLS version is not relevant, as the error occurs before the protocol negotiation. The most likely cause of the error is that the client machine does not have the root CA certificate installed in its trust store, or that the cloud provider's certificate chain is incomplete or broken. To fix the error, the client machine needs to install the root CA certificate or the cloud provider needs to fix its certificate chain.

Topics

#TLS handshake#certificate trust chain#SSL errors#root CA

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice