1. A systems administrator has installed a new UTM that is capable of inspecting SSL/TLS traffic for malicious payloads. All inbound network traffic coming from the internet and terminating on the company's secure web servers must be inspected. Which of the following configurations would best support this requirement? A. The web servers’ CA full certificate chain must be installed on the UTM
B. The UTM’s certificate pair must be installed on the web servers
C. The web servers’ privet certificate must be installed on the UTM
D. The UTM and web server must use the same certificate authority
2. A company has migrated to two-factor authentication for accessing the corporate network, VPN, and SSO. Several legacy applications cannot support multifactor authentication and must continue to use usernames and passwords. Which of the following should be implemented to ensure the legacy applications are as secure as possible while ensuring functionality?
A. Privileged accounts
B. Password reuse restrictions
C. Password complexity requirements
D. Password history
E. Password recovery
F. Account disablement