GSLC · Question #173
You work as a Network Administrator for Net Perfect Inc. The company's intranet Web site netperfect.com uses a digital certificate issued by the company's Enterprise Certificate Authority. The…
The correct answer is A. Kate's computer is not configured with the digital certificate. When an Enterprise CA issues a certificate, client machines must have the CA certificate installed in their Trusted Root store to avoid 'untrusted source' errors.
Question
You work as a Network Administrator for Net Perfect Inc. The company's intranet Web site netperfect.com uses a digital certificate issued by the company's Enterprise Certificate Authority. The Enterprise Certificate Authority is located on a server named certificates.netperfect.com. Kate, a user, complains that she is unable to access the secure Web site on her computer using Internet Explorer. An error message appears stating that the digital certificate is not from a trusted source. What is the most likely cause?
Options
- AKate's computer is not configured with the digital certificate.
- BThe company's intranet server is not configured to support remote connections.
- CKate is not a member of the Administrators group.
- DKate is not using https protocol to connect to the secure Web site.
How the community answered
(26 responses)- A81% (21)
- B4% (1)
- C4% (1)
- D12% (3)
Why each option
When an Enterprise CA issues a certificate, client machines must have the CA certificate installed in their Trusted Root store to avoid 'untrusted source' errors.
Internet Explorer validates certificates by checking whether the issuing CA is in the computer's Trusted Root Certification Authorities store. Because Kate's computer lacks the Enterprise CA certificate, it cannot establish a chain of trust to the certificate on netperfect.com, triggering the untrusted source error. The fix is to deploy the Enterprise CA certificate to Kate's machine, typically via Group Policy.
Remote connection support is a server-side network configuration unrelated to certificate trust validation on the client.
Administrator group membership does not affect whether a browser trusts a certificate authority.
Kate must already be using HTTPS to receive a certificate error; the error itself confirms HTTPS is in use.
Concept tested: Enterprise CA trusted root certificate deployment
Source: https://learn.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority
Topics
Community Discussion
No community discussion yet for this question.