QuestionQ19

Onboard

Refer to the exhibit.

Question Image

What is the purpose of the “Clock Skew Allowance” setting?

Choose two
  • A to ensure server certificate validation does not fail due to client clock sync issues
  • B to set expiry time in client certificate to a few minutes longer that the default setting
  • C to adjust clock time on client device to a few minutes before current time
  • D to ensure client certificate validation does not fail due to client clock sync issues
  • E to set start time in client certificate to a few minutes before current time
Explanation

Clock skew allowance pre-dates and post-dates the validity window of a client certificate by the configured number of minutes. It therefore sets the certificate start time a few minutes before the current time and extends the certificate expiry time by a few minutes beyond the normal validity period.

Community Discussion

No comments yet. Be the first to start the discussion!