Exam CNX-001 topic 1 question 26 discussion

Actual exam question from CompTIA's CNX-001

Question #: 26
Topic #: 1

End users are getting certificate errors and are unable to connect to an application deployed in a cloud. The application requires HTTPS connection. A network solution architect finds that a firewall is deployed between end users and the application in the cloud. Which of the following is the root cause of the issue?

A. The firewall on the application server has port 443 blocked.
B. The firewall has port 443 blocked while SSL/HTTPS inspection is enabled.
C. The end users do not have certificates on their laptops.
D. The firewall has an expired certificate while SSL/HTTPS inspection is enabled.

Show Suggested Answer

Suggested Answer: D 🗳️

by SuntzuLegacy at May 19, 2025, 2:32 a.m.

Comments

Submit Cancel

SuntzuLegacy

1 month, 1 week ago

Selected Answer: D

Answer: D. The firewall has an expired certificate while SSL/HTTPS inspection is enabled. When a firewall performs SSL/HTTPS inspection, it effectively acts as a “man in the middle”: it terminates the user’s HTTPS session, inspects the traffic, and then re-encrypts the connection to the server. If the certificate on the firewall that is used to re-sign the traffic is expired (or otherwise invalid), end users will see certificate errors when trying to connect via HTTPS.

upvoted 1 times

...