Exam 1Y0-241 topic 1 question 23 discussion

Actual exam question from Citrix's 1Y0-241

Question #: 23
Topic #: 1

Scenario: While attempting to access web server that is load balanced by a Citrix ADC using HTTPS, a user receives the message below:
SSL/TLS error: You have not chosen to trust `Certificate Authority` the issuer of the server's security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?

A. Ensure that users have the certificate's private key.
B. Ensure that users have the certificate's public key.
C. Ensure that the server certificate is linked to its respective intermediate and root certificates.
D. Ensure that users have the server certificate installed.

Show Suggested Answer

Suggested Answer: C 🗳️

by ImMaax at Dec. 14, 2021, 11:28 p.m.

Comments

Submit Cancel

ImMaax

Highly Voted 3 years ago

https://support.citrix.com/article/CTX101990 claims the answer is C root and int Certs

upvoted 10 times

caioninaut

1 year, 6 months ago

I'll go with D because, according to this page: This error message suggests that the CLIENT DEVICE does not have the required root certificate/intermediate certificate to establish trust with the certificate authority who issued the NetScaler Gateway server certificate.

upvoted 1 times

...

Steve122

Most Recent 11 months, 3 weeks ago

Selected Answer: C

C D makes no sense Why do you wanna install the server cert? Just need the Root or intermed. who signed the server cert.

upvoted 1 times

...

sayed_hussain

1 year, 3 months ago

Answers is C you dont need to install server Cert only Root Cert

upvoted 2 times

...

wideawake

2 years ago

Selected Answer: D

i agree with solo ttps://support.citrix.com/article/CTX101990 This error message suggests that the client device does not have the required root certificate/intermediate certificate to establish trust with the certificate authority who issued the NetScaler Gateway server certificate.

upvoted 1 times

...

foreigner78

2 years, 6 months ago

Selected Answer: C

C. This happens to me very often while giving support. No user should have to install or trust root certs for a SSL application if certificate links are correctly done on the vserver.

upvoted 4 times

...

eternityone

2 years, 6 months ago

Selected Answer: C

C - The Cert Chains is not valid

upvoted 2 times

...

Solo514

2 years, 7 months ago

Selected Answer: D

I would choose D. I saw several articles about error SSL61, and it"s a problem with the client software that cannot handle SHA-2. So you should upgrade the client software or certificates

upvoted 2 times

...