nerdexam
CompTIA

SY0-501 · Question #431

A user typically works remotely over the holidays using a web-based VPN to access corporate resources. The user reports getting untrusted host errors and being unable to connect. Which of the…

The correct answer is A. The certificate has expired. An "untrusted host error" when connecting to a web-based VPN strongly suggests an issue with the server's security certificate, specifically that it has expired.

Submitted by layla.eg· Mar 4, 2026Security architecture

Question

A user typically works remotely over the holidays using a web-based VPN to access corporate resources. The user reports getting untrusted host errors and being unable to connect. Which of the following is MOST likely the case?

Options

  • AThe certificate has expired
  • BThe browser does not support SSL
  • CThe user's account is locked out
  • DThe VPN software has reached the seat license maximum

How the community answered

(42 responses)
  • A
    79% (33)
  • B
    12% (5)
  • C
    2% (1)
  • D
    7% (3)

Why each option

An "untrusted host error" when connecting to a web-based VPN strongly suggests an issue with the server's security certificate, specifically that it has expired.

AThe certificate has expiredCorrect

Web-based VPNs establish secure connections using SSL/TLS certificates to authenticate the server and encrypt traffic. If this certificate has expired, web browsers will deem the host untrustworthy, producing "untrusted host errors" and halting the connection before authentication can occur.

BThe browser does not support SSL

All modern web browsers inherently support SSL/TLS, and an "untrusted host error" points to a problem with the server's certificate validity, not a deficiency in browser capability.

CThe user's account is locked out

If a user's account were locked, the error message would be related to authentication failure (e.g., "account locked" or "invalid credentials"), not an "untrusted host" error, which occurs during the initial secure connection setup.

DThe VPN software has reached the seat license maximum

Reaching a VPN's seat license maximum would typically result in a message indicating capacity limits (e.g., "maximum users reached"), not an "untrusted host" error concerning certificate trust.

Concept tested: SSL/TLS certificate expiration and trust errors

Source: https://learn.microsoft.com/en-us/azure/application-gateway/troubleshoot-ssl-errors

Topics

#SSL certificate#certificate expiration#VPN#PKI

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice