CV0-004 · Question #179
A company recently adjusted its load-balancer encryption policies to support only TLSv1.3. Soon after the change was made, several customers began reporting they could not access their website…
The correct answer is C. The customers are using an unsupported OS. Restricting the load balancer to TLSv1.3 only means any client that does not support TLSv1.3 will fail to establish a secure connection. TLSv1.3 support depends on both the browser and the underlying operating system's TLS library. Older operating systems (e.g., Windows 7…
Question
A company recently adjusted its load-balancer encryption policies to support only TLSv1.3. Soon after the change was made, several customers began reporting they could not access their website. Which of the following is the MOST likely cause of the issue?
Options
- AThe certificate is expired.
- BThere is a mismatch between the key and the certificate.
- CThe customers are using an unsupported OS.
- DThe load balancer was misconfigured.
How the community answered
(65 responses)- A22% (14)
- B14% (9)
- C58% (38)
- D6% (4)
Explanation
Restricting the load balancer to TLSv1.3 only means any client that does not support TLSv1.3 will fail to establish a secure connection. TLSv1.3 support depends on both the browser and the underlying operating system's TLS library. Older operating systems (e.g., Windows 7, older Android versions) may not support TLSv1.3, causing affected users to be unable to connect. An expired certificate would cause a certificate warning, not a connection failure for only some users. A key/certificate mismatch would affect all users equally. A load balancer misconfiguration is possible, but the direct cause described - a policy change limiting protocol support - points to client OS incompatibility.
Topics
Community Discussion
No community discussion yet for this question.