nerdexam
CompTIA

SY0-501 · Question #356

The IT department is deploying new computers. To ease the transition, users will be allowed to access their old and new systems. The help desk is receive reports that users are experiencing the…

The correct answer is C. Certificate issues. In a dual-system transition environment, 'Logon Failure: Access Denied' errors are commonly caused by certificate issues, particularly when smart card or certificate-based authentication is involved and the old system cannot validate the user's new or updated certificates.

Submitted by katya_ua· Mar 4, 2026Security operations

Question

The IT department is deploying new computers. To ease the transition, users will be allowed to access their old and new systems. The help desk is receive reports that users are experiencing the following error when attempting to log in to their previous system:

Logon Failure: Access Denied Which of the following can cause this issue?

Options

  • APermission issues
  • BAccess violations
  • CCertificate issues
  • DMisconfigured devices

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    78% (18)
  • D
    13% (3)

Why each option

In a dual-system transition environment, 'Logon Failure: Access Denied' errors are commonly caused by certificate issues, particularly when smart card or certificate-based authentication is involved and the old system cannot validate the user's new or updated certificates.

APermission issues

Permission issues would typically cause errors related to specific resource access denials after logon, not a failure at the authentication/logon stage itself.

BAccess violations

Access violations refer to unauthorized attempts to access restricted memory or resources at the OS/application level, not an authentication failure during the logon process.

CCertificate issuesCorrect

When organizations deploy new computers, user certificates or smart card certificates may be updated or re-issued, causing the old system to fail authentication because it cannot validate the new certificate chain or the old certificate has been superseded. Certificate-based authentication failures manifest as 'Logon Failure: Access Denied' because the credential presented cannot be verified, even though the user's account and permissions are otherwise intact. This is a known issue in environments using PKI or smart card logon during hardware refresh cycles.

DMisconfigured devices

Misconfigured devices could cause connectivity or policy issues, but in the context of a system transition with this specific logon error, it does not directly explain why existing user credentials fail on the old system.

Concept tested: Certificate-based authentication failure during system transition

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/smart-card-logon-authentication-issues

Topics

#certificate management#authentication failure#access control troubleshooting#PKI

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice