Exam 350-401 topic 1 question 849 discussion

Actual exam question from Cisco's 350-401

Question #: 849
Topic #: 1

Refer to the exhibit. An engineer is configuring WebAuth on a Cisco Catalyst 9800 Series WLC. The engineer has purchased a third-party certificate using the FQDN of the WLC as the CN and intends to use it on the WebAuth splash page. What must be configured so that the clients do not receive a certificate error?

A. Virtual IPv4 Hostname must match the CN of the certificate
B. Virtual IPv4 Address must be set to a routable address
C. Web Auth Intercept HTTPs must be enabled
D. Trustpoint must be set to the management certificate of the WLC

Show Suggested Answer

Suggested Answer: A 🗳️

by kaupz at Nov. 1, 2023, 3:47 p.m.

Comments

Submit Cancel

kaupz

Highly Voted 1 year, 7 months ago

if FQDN and SSL CN and/or SAN mismatch, then you'll receive certificate warning in browser.

upvoted 5 times

kaupz

1 year, 7 months ago

A should be correct

upvoted 6 times

...

Zeruz

Most Recent 8 months ago

Selected Answer: A

It's a common for our customer to use in their web servers the IP address as the CN for internal test purposes. When they reach production and change some parts of their design, including new certificates, they usually have no idea why the webpage sends a certificate error. Then they call us because they believe there is a problem in the firewall. ¯\_(ツ)_/¯

upvoted 1 times

...

chiacche

8 months, 2 weeks ago

To prevent certificate errors with WebAuth on Cisco Catalyst 9800 WLC, the virtual IPv4 hostname must match the CN on the certificate exactly.

upvoted 1 times

...

[Removed]

1 year ago

Selected Answer: A

A is correct

upvoted 1 times

...