Which of the following is the MOST likely reason for the error?

A penetration tester is testing a new version of a mobile application in a sandbox environment. To intercept and decrypt the traffic between the application and the external API, the tester has created a private root CA and issued a certificate from it. Even though the tester installed the root CA into the trusted stone of the smartphone used for the tests, the application shows an error indicating a certificate mismatch and does not connect to the server.

Which of the following is the MOST likely reason for the error?
A . TCP port 443 is not open on the firewall
B . The API server is using SSL instead of TLS
C . The tester is using an outdated version of the application
D . The application has the API certificate pinned.

View Answer

Answer: D