QuestionQ13

Identify Network Access Control and Security Features

An organization is deploying certificates for its internal servers and wants to maintain security and reliability. It decides to use SAN records in its certificates.

What essential action must it take to ensure that every hostname is correctly validated?

Explanation

Hostname validation is performed against the certificate’s Subject Alternative Name (SAN) extension. All intended server hostnames must be included there, including a hostname also present in the Common Name, because clients may not use the CN for hostname matching.

Community Discussion

No comments yet. Be the first to start the discussion!