Users report the following message appear when browsing to the company's secure site: This website Which of the following actions should a security analyst take to resolve these cannot be trusted messages? (Select TWO)

Question

Accepted Answer

A. Verify the certificate has not expired on the server An expired certificate causes browsers to display trust warnings because the certificate is no longer considered valid; verifying and renewing the certificate on the server directly resolves this condition. C. Update the root certificate into the client computer certificate store If the certificate was issued by an internal or unknown CA, clients will not trust it unless the root CA certificate is installed in their Trusted Root Certification Authorities store, which resolves the 'cannot be trusted' message by establishing a complete chain of trust.

Answer

B. Ensure the certificate has a .pfx extension on the server The .pfx file extension refers to a PKCS#12 archive format used for importing/exporting certificates with private keys; the file extension of the certificate has no bearing on whether a browser trusts the site.

Answer

D. Install the updated private key on the web server The private key is never transmitted to clients and is not involved in the trust validation process; updating the private key on the server would not resolve a browser trust warning.

Answer

E. Have users clear their browsing history and relaunch the session Clearing browsing history removes cached content and cookies but does not alter the certificate store or fix an expired/untrusted certificate, so the trust error would persist after relaunching.

Users report the following message appear when browsing to the company's secure site: This website Which of the following actions should a security analyst take to resolve these cannot be trusted…

Question

Options

How the community answered

Why each option

Topics

Community Discussion