What are two reasons for this error?

Exhibit

When trying to set up a server protection SSL proxy, you receive the error shown.

What are two reasons for this error? (Choose two.)
A . The SSL proxy certificate ID is part of a blocklist.
B . The SSL proxy certificate ID does not have the correct renegotiation option set.
C . The SSL proxy certificate ID is for a forwarding proxy.
D . The SSL proxy certificate ID does not exist.

View Answer

Answer: A D

Explanation:

Two possible reasons for this error are that the SSL proxy certificate ID does not exist, or the SSL proxy certificate ID is part of a blocklist. If the SSL proxy certificate ID does not exist, you will need to generate a new certificate. If the SSL proxy certificate ID is part of a blocklist, you will need to contact the source of the blocklist to remove it. Additionally, you may need to check that the SSL proxy certificate ID has the correct renegotiation option set, as this is necessary for proper server protection. For more information, you can refer to the Juniper Security documentation at https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/security-ssl-pro