What is the primary purpose of the PKCS#12 format?

To list all certificates in a system's trust store

To convert a certificate from PEM to DER encoding

To generate a certificate signing request

To store a certificate and its private key together in a single encrypted file

What is the primary purpose of the public key in an SSL/TLS certificate?

To store the certificate's serial number

To encrypt data sent to the certificate holder

To sign data to prove the sender's identity

To decrypt data encrypted with the private key

An administrator is setting up a new web server for the domain api.example.com. The organization's security policy requires certificates to be issued by a public CA. The administrator has already generated a private key. What is the next step to obtain a signed certificate?

Send the private key to the CA so it can generate a certificate

Generate a self-signed certificate and submit it to the CA for approval

Install the private key directly into the web server and enable HTTPS

Create a CSR using the private key and submit it to the CA

An administrator is installing a new SSL certificate on an Nginx server. The certificate and private key are in separate files. After updating the configuration, Nginx fails to start with an error about the certificate. What is the most likely cause?

The server name does not match the certificate

The private key does not match the certificate

The certificate is in DER format

A certificate file is provided in DER format, but the application requires PEM format. The administrator needs to convert the certificate. Which OpenSSL command should be used?

openssl req -in cert.der -out cert.pem -inform DER

openssl rsa -in cert.der -out cert.pem -inform DER

openssl x509 -inform DER -in cert.der -out cert.pem

openssl pkcs12 -in cert.der -out cert.pem -nodes

CiscoCertified DevNet Professional

Domain 4Objective 9

Configure Application Specific SSL Certificates 350-901 Practice Questions (Page 2)

Part of the 4.0 Application Deployment and Security domain, which accounts for 20% of the 350-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

20%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of the PKCS#12 format?
Select an answer first
7foundation · easy
What is the primary purpose of the public key in an SSL/TLS certificate?
Select an answer first
8application · medium
An administrator is setting up a new web server for the domain api.example.com. The organization's security policy requires certificates to be issued by a public CA. The administrator has already generated a private key. What is the next step to obtain a signed certificate?
Select an answer first
9application · medium
An administrator is installing a new SSL certificate on an Nginx server. The certificate and private key are in separate files. After updating the configuration, Nginx fails to start with an error about the certificate. What is the most likely cause?
Select an answer first
10application · medium
A certificate file is provided in DER format, but the application requires PEM format. The administrator needs to convert the certificate. Which OpenSSL command should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-901” is a trademark of its owner, used for identification only.