Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 361 discussion

Actual exam question from CompTIA's SY0-601

Question #: 361
Topic #: 1

As part of the building process for a web application, the compliance team requires that all PKI certificates are rotated annually and can only contain wildcards at the secondary subdomain level. Which of the following certificate properties will meet these requirements?

A. HTTPS://*.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2022
B. HTTPS://app1.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2022
C. HTTPS://*.app1.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2022
D. HTTPS://*.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2023

Show Suggested Answer

Suggested Answer: C 🗳️

by sdc939 at Feb. 10, 2023, 3:24 p.m.

Comments

Submit Cancel

seagnull

Highly Voted 2 years, 3 months ago

Selected Answer: C

* - secondary subdomain app1 - subdomain comptia - domain

upvoted 34 times

kshadow22

11 months, 3 weeks ago

I realized I don't know how to count.. thanks!

upvoted 1 times

...

NunoF4

2 years, 3 months ago

agree with seagnull - C is the only one with a secondary sub domain

upvoted 2 times

...

[Removed]

Highly Voted 1 year, 5 months ago

Selected Answer: C

Believe in yourselves, you're not alone. I've been grinding here too, doubting myself but...I'll never stop.

upvoted 27 times

...

AbdullahMohammad251

Most Recent 1 year, 1 month ago

Selected Answer: C

A contains wildcards at the 1st subdomain level B doesn't contain wildcards D contains wildcards at the 1st subdomain level + certificate is valid for 2 years C contains wildcards at the second subdomain level and a certificate valid for one year. * - used for wildcards in the first subdomain level app1 - is the second subdomain comptia - is the domain org - is the top-level domain

upvoted 2 times

...

Nick5535

1 year, 6 months ago

Selected Answer: C

C is the Answer And also to Note the Option D cert expires in 2 years which is wrong. an PKI cert should be valid is less than 1 year

upvoted 2 times

...

Teleco0997

1 year, 6 months ago

Selected Answer: C

crystal clear

upvoted 1 times

...

Bl1024

1 year, 10 months ago

Selected Answer: C

https://www.ssldragon.com/blog/wildcard-certificate-multiple-level-subdomains/

upvoted 2 times

LeDarius3762

1 year, 10 months ago

Now, to create a subdivision within blog.yourdomain.com, you would generate a CSR with the format *.blog.yourdomain.com in place of the FQDM. Here the asterisk is substituting all the potential second-level subdomains of the “blog” subdomain. In the case of the question: *.app1.comptia.org ANSWER C

upvoted 1 times

...

Bl1024

1 year, 10 months ago

upvoted 1 times

...

Invade

2 years, 2 months ago

Selected Answer: A

Wildcard is placed in subdomain level. D is 3 levels deep

upvoted 3 times

...

Binx

2 years, 3 months ago

Answer: A. HTTPS://*.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2022. The question asks for the secondary subdomain. If the the domain is comptia.org then the SECONDARY subdomain would be the wildcard in HTTPS://*.comptia.org. In Answer C the domain goes three levels deep HTTPS://*.app1.comptia.org. And in D , Although the wildcard placement is correct the dates are two years instead of 1 year.

upvoted 6 times

...