QuestionQ7

Security Operations

The security team is receiving escalated support tickets reporting that one of the company’s publicly available websites is not loading as expected. Given these observations:

Question Image

Which of the following is the most likely root cause?

  • A A certificate signed by a global root certification authority has expired.
  • B A protocol mismatch error is expected to occur when using outdated browsers.
  • C One certificate is being bound to multiple websites on the same server.
  • D Subject alternative names were not used appropriately for subdomains.
Explanation

TLS hostname validation requires the requested DNS name to match a certificate DNS SAN (or an applicable wildcard). A certificate for website.com does not match www.website.com, so the www hostname must be included as a Subject Alternative Name or otherwise covered by a valid certificate. Microsoft Learn: X509Certificate2.MatchesHostname

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!