nerdexam
CompTIACompTIA

SY0-501 · Question #431

SY0-501 Question #431: Real Exam Question with Answer & Explanation

The correct answer is A: The certificate has expired. An "untrusted host error" when connecting to a web-based VPN strongly suggests an issue with the server's security certificate, specifically that it has expired.

Submitted by layla.eg· Mar 4, 2026

Question

A user typically works remotely over the holidays using a web-based VPN to access corporate resources. The user reports getting untrusted host errors and being unable to connect. Which of the following is MOST likely the case?

Options

  • AThe certificate has expired
  • BThe browser does not support SSL
  • CThe user's account is locked out
  • DThe VPN software has reached the seat license maximum

Explanation

An "untrusted host error" when connecting to a web-based VPN strongly suggests an issue with the server's security certificate, specifically that it has expired.

Common mistakes.

  • B. All modern web browsers inherently support SSL/TLS, and an "untrusted host error" points to a problem with the server's certificate validity, not a deficiency in browser capability.
  • C. If a user's account were locked, the error message would be related to authentication failure (e.g., "account locked" or "invalid credentials"), not an "untrusted host" error, which occurs during the initial secure connection setup.
  • D. Reaching a VPN's seat license maximum would typically result in a message indicating capacity limits (e.g., "maximum users reached"), not an "untrusted host" error concerning certificate trust.

Concept tested. SSL/TLS certificate expiration and trust errors

Reference. https://learn.microsoft.com/en-us/azure/application-gateway/troubleshoot-ssl-errors

Community Discussion

No community discussion yet for this question.

Full SY0-501 PracticeBrowse All SY0-501 Questions