What is the purpose of the ‘Clock Skew Allowance’ setting? (Select two.)
A.
to ensure server certificate validation does not fail due to client clock sync issues
B.
to set start time in client certificate to a few minutes before current time
C.
to adjust clock time on client device to a few minutes before current time
D.
to ensure client certificate validation does not fail due to client clock sync issues
E.
to set expiry time in client certificate to a few minutes longer than the default setting
The Answer Is:
D
This question includes an explanation.
Explanation:
Clock Skew Allowance adds a small amount of time to the start and end of the client certificate’s, not the server certificate's, validity period. This permits a newly issued certificate to be recognized as valid in a network where not all devices are perfectly synchronized.