HPE6-A68 · Question #78

What is the purpose of the Clock Skew Allowance' setting?

The correct answer is D. to ensure client certificate validation does not fail due to client clock sync issues. Clock Skew Allowance adds a small amount of time to the start and end of the client certificate's, not the server certificate's, validity period. This permits a newly issued certificate to be recognized as valid in a network where not all devices are perfectly synchronized.

Authentication and Authorization

Question

Exhibit

Options

Ato ensure server certificate validation does not fail due to client clock sync issues
Bto set start time in client certificate to a few minutes before current time
Cto adjust clock time on client device to a few minutes before current time
Dto ensure client certificate validation does not fail due to client clock sync issues
Eto set expty time in client certificate to a few minutes longer than the default setting

How the community answered

(25 responses)

A
8% (2)
B
4% (1)
C
4% (1)
D
72% (18)
E
12% (3)

Explanation

Clock Skew Allowance adds a small amount of time to the start and end of the client certificate's, not the server certificate's, validity period. This permits a newly issued certificate to be recognized as valid in a network where not all devices are perfectly synchronized.

Topics

#clock skew#certificate validation#EAP-TLS#client certificate

Community Discussion

No community discussion yet for this question.

Full HPE6-A68 Practice