Why must a network engineer avoid usage of the default X509 certificate when implementing clientless SSLVPN on an ASA?

exams 300-209 300-209 exam 0 Comments

Why must a network engineer avoid usage of the default X509 certificate when implementing clientless SSLVPN on an ASA?

A. The certificate is too weak to provide adequate security.

B. The certificate is regenerated at each reboot.

C. The certificate must be managed by the local CA.

D. The default X.509 certificate is not supported for SSLVPN.

Answer: B