Wildcard Certificates for Multi-Subdomain Cost Efficiency
A security administrator is working to find a cost-effective solution to implement certificates for a large number of domains and subdomains owned by the company. Which of the following types of certificates should the administrator implement?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Tests knowledge of SSL/TLS certificate types, specifically identifying wildcard certificates as the optimal choice for securing numerous subdomains under one primary domain name.
Wildcard certificates secure a domain and all its subdomains with a single certificate, providing a cost-effective solution for managing multiple domains.
Learners often confuse wildcard certificates with self-signed certificates, mistakenly choosing self-signed to save costs despite ignoring the critical requirement for trusted public validation in most enterprise scenarios.
Community Discussion (6 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A wildcard certificate is designed to secure a base domain and an unlimited number of subdomains (e.g., *.example.com covers mail.example.com, www.example.com, etc.). This makes it the most cost-effective option for a company owning many subdomains, as only one certificate purchase and management cycle are required instead of individual ones for each subdomain.Why the Other Options Are Wrong
Self-signed certificates (C) are free but not trusted by default by browsers or clients, requiring manual distribution and trust establishment, which is impractical for large-scale public-facing services. Code signing certificates (D) are used to verify the identity of software publishers, not to encrypt web traffic. Client certificates (B) authenticate users to servers, not the server's identity to clients.Community Comment Notes
The majority of voters correctly identified Wildcard certificates due to their ability to cover multiple subdomains efficiently. One user raised a concern about the plural 'domains' in the question, suggesting that if multiple distinct root domains were involved, wildcard certificates might not be cost-effective without buying multiple wildcards. However, in certification exam contexts, 'domains and subdomains' typically implies a hierarchy under a single registered domain where wildcards are standard practice. Another commenter incorrectly defined 'wildcard' as a file search pattern, confusing the computing term with the cryptographic context.Exam Strategy
When a question mentions 'cost-effective' and 'multiple subdomains', immediately consider wildcard certificates. Always distinguish between securing a single domain (standard SSL), multiple subdomains of one domain (wildcard), and multiple distinct domains (SAN/UCC).
Frequently Asked Questions
Why not use Self-Signed certificates to save money?
Self-signed certs are not trusted by clients/browsers by default, causing security warnings. They require manual trust installation on every device, which is unscalable for large enterprises.
What if the company owns multiple distinct root domains?
If multiple distinct root domains are needed, a Single Wildcard won't work. You would need either multiple wildcard certificates or a Subject Alternative Name (SAN) certificate.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →