Exam CV0-003 All Questions

View all questions & answers for the CV0-003 exam

Exam CV0-003 topic 1 question 75 discussion

Actual exam question from CompTIA's CV0-003

Question #: 75
Topic #: 1

After analyzing a web server's log, a systems administrator sees that users are connecting to the company's application through HTTP instead of HTTPS. The administrator then configures a redirect from HTTP to HTTPS on the web server, and the application responds with a connection time-out message. Which of the following should the administrator verify NEXT?

A. The TLS certificate
B. The firewall rules
C. The concurrent connection limit
D. The folder permissions

Show Suggested Answer

Suggested Answer: B 🗳️

by dvd21 at Dec. 2, 2021, 4:18 p.m.

Comments

Submit Cancel

dvd21

Highly Voted 3 years, 8 months ago

B. Firewall rules. Users are seeing a connection time, not cert based errors.

upvoted 18 times

reto1

11 months ago

A. The TLS certificate. Explanation: TLS Certificate: It's essential to ensure that the TLS (Transport Layer Security) certificate is correctly installed and valid. If there are issues with the certificate, such as it being expired, misconfigured, or not trusted, clients may not be able to establish a secure connection, leading to time-out errors.

upvoted 1 times

...

reto1

11 months ago

If the firewall were blocking HTTPS traffic, users wouldn't be able to connect at all, but the specific issue here is the redirect causing a time-out.

upvoted 1 times

...

ROCompTIA

2 years, 2 months ago

When configuring a redirect from HTTP to HTTPS, it's essential to have a valid and properly installed Transport Layer Security (TLS) certificate on the web server. The TLS certificate is required to establish a secure connection over HTTPS.This usually happens also on a mail server on that webhost when the certificate has problems !!! Firewall rules are less likely to directly cause a connection time-out after a redirect from HTTP to HTTPS. The error here will be Connection Refused, or Destination Unreachable. Therefore, verifying the TLS certificate is the most relevant next step for the administrator.

upvoted 3 times

kuzummjakk

1 year, 5 months ago

"it's important to have a TLS cert for HTTPS" yes obviously. If the connection is refused by a firewall, they typically simply don't respond on behalf of the device, leading a timeout. This is especially true in the cloud. One of the reasons is to deny port scanners the clear answer of "this port is closed".

upvoted 1 times

...

BigM

Most Recent 5 months, 2 weeks ago

Selected Answer: B

Answer seems to be B Since the administrator configured an HTTP to HTTPS redirect, but now experiences a connection timeout, the next logical step is to check firewall rules: ✔ Potential Cause: If port 443 (HTTPS) is blocked or not properly configured in the firewall, requests redirected from HTTP (port 80) to HTTPS will fail, resulting in a timeout. ✔ What to Check? Ensure port 443 is open for inbound traffic. Verify security group rules (if in a cloud environment). Confirm no rules are blocking HTTPS connections.

upvoted 1 times

...

BigM

5 months, 3 weeks ago

Selected Answer: B

Firewall rules If the certificate were invalid, users would receive a certificate warning, not a connection time-out.

upvoted 1 times

...

WereAllinThisTogether

9 months ago

Selected Answer: B

If there was something wrong with the Certificate itself it would propagate a different message that would more specific to the issue it would not generate a time-out. Since accessibility is confirmed utilizing port 80 but time-outs occur when utilizing port 443 when redirected it would be presumed this is a firewall issue blocking the connection. 100% the answer is B. Firewall Rules. Surprisingly i find this to be one of the easiest questions in the question bank but somehow the most debated?

upvoted 2 times

...

uzey

12 months ago

Selected Answer: A

Since the redirect to HTTPS is successful but users are encountering a connection timeout, the most likely culprit is an issue with the TLS certificate. This could be due to several reasons: Certificate expiration: The certificate might have expired. Certificate chain issues: There might be problems with the certificate chain, preventing browsers from trusting it. Certificate configuration errors: The certificate might not be configured correctly on the web server. By verifying the TLS certificate, the administrator can determine if it is the root cause of the connection timeouts.

upvoted 2 times

...

TheFivePips

1 year, 2 months ago

Selected Answer: B

Both A or B could be correct. I would expect a TLS issue to have a more specific error, and I would definitely think to check the ports first since it is pretty easy. Id go with B but the question is bad.

upvoted 1 times

...

kuzummjakk

1 year, 5 months ago

Selected Answer: B

Absolutely B. If there was a TLS issue, it'd be a TLS error. There is no shortage of TLS errors for TLS issues so it wouldn't simply not give a TLS error.

upvoted 2 times

...

salthehash

1 year, 7 months ago

Selected Answer: B

The firewall rules: It's possible that the firewall is blocking HTTPS traffic, preventing the successful redirection. The administrator should check the firewall rules to ensure that traffic on the HTTPS port (typically port 443) is allowed

upvoted 4 times

...

FrancisDrake

1 year, 7 months ago

Yes, tricky. But the question has NEXT in all caps. Firewall is the easiest thing to check NEXT.

upvoted 1 times

...

VVV4WIN

1 year, 8 months ago

Trick question, but application server responded, meaning there was connectivity to it, thus firewall not blocking connections. First I was convinced it was the firewall, but Not_That_Guy answer below convinced me otherwise....

upvoted 1 times

TheFivePips

1 year, 2 months ago

The connection time-out error is generated by the client-side network stack or web browser, not by the server itself. It occurs when the client's request to establish a connection with the server goes unanswered for too long. A connection time-out error does not necessarily indicate whether the server is working or not. It simply means that the client was unable to establish a connection with the server within the allotted time. The server may be unavailable due to various reasons, such as network issues, server downtime, firewall restrictions, or overloaded server resources.

upvoted 1 times

...

yyCherubim

1 year, 9 months ago

I can see the case for both A & B. It's the 50/50/90 rule of test-taking: You have a 50/50 change of picking the correct answer; 90% of the time you will pick the wrong one. :]

upvoted 1 times

...

backdooranon

1 year, 10 months ago

Selected Answer: B

B is correct. A is possible if error was certificate related (expired or not trusted).

upvoted 1 times

...

ROCompTIA

2 years, 2 months ago

Selected Answer: A

I explained why below

upvoted 1 times

...

SecPlus2022

2 years, 2 months ago

Selected Answer: A

You can have timeouts caused by TLS issues and timeouts caused by TCP issues (both separately or together). The question tells you that the company's web application RESPONDED to requests after it was switched to https. This proves 443 is already open.

upvoted 2 times

TheFivePips

1 year, 2 months ago

You got a timeout error. That is not the same thing as the server responding to requests. The errors originate from the client side stack or web browser.

upvoted 1 times

...

maelo

2 years, 3 months ago

Selected Answer: B

B. Connection time-out message is not cert related.

upvoted 1 times

...

davidsvida

2 years, 6 months ago

An SSL certificate error occurs when the browser cannot verify the SSL certificates returned by the server. When the error happens, the browser blocks the website and warns the user that the website cannot be trusted as shown below.

upvoted 1 times

...

TheGinjaNinja

2 years, 6 months ago

Selected Answer: A

A. The TLS certificate When the administrator configures a redirect from HTTP to HTTPS, the browser will try to establish a secure connection with the server. The browser will check the authenticity of the server's certificate before establishing the connection. If the certificate is invalid, expired or not trusted, the browser will not establish the connection, and the user will get the connection time-out message. Therefore, the administrator should verify the validity, expiration and trust of the server's certificate.

upvoted 2 times

...

Load full discussion...