HPE Networking ClearPass (HPE6-A88)Demo

By HP · Question Mode

QuestionQ13

Identify Network Access Control and Security Features

An organization is deploying certificates for its internal servers and wants to maintain security and reliability. It decides to use SAN records in its certificates.

What essential action must it take to ensure that every hostname is correctly validated?

  • A Use separate certificates for each server to avoid conflicts.
  • B Use IP addresses instead of hostnames in the SAN for better security.
  • C Include all hostnames in the SAN, even those listed in the CN.
Explanation

Hostname validation is performed against the certificate’s Subject Alternative Name (SAN) extension. All intended server hostnames must be included there, including a hostname also present in the Common Name, because clients may not use the CN for hostname matching.

Community Discussion

No comments yet. Be the first to start the discussion!