Demonstrate How to Securely Serve Content (HTTP/HTTPS) F5N2 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary role of a TLS/SSL certificate in establishing a secure connection?

   • ATo prevent unauthorized users from accessing the server
   • BTo encrypt the data using symmetric encryption
   • CTo authenticate the server's identity and provide the public key for the TLS handshake
   • DTo compress data before transmission
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A company runs a high-traffic e-commerce site on NGINX. They want to maximize security and performance. They have a valid certificate and key. The administrator is considering whether to enable HTTP/2 on the HTTPS server block. What is the most important consideration when deciding to enable HTTP/2?

   • AHTTP/2 requires the use of a specific cipher suite, such as ECDHE, to be enabled.
   • BHTTP/2 automatically disables all weak ciphers and protocols, so no additional configuration is needed.
   • CHTTP/2 can improve performance by multiplexing multiple requests over a single connection, but it must be enabled with the `http2` parameter on the `listen` directive.
   • DHTTP/2 is only supported on port 443 and cannot be used on other ports.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the purpose of redirecting HTTP requests to HTTPS in NGINX?

   • ATo allow NGINX to serve both static and dynamic content
   • BTo ensure that all client traffic is encrypted and secure
   • CTo improve website loading speed
   • DTo reduce server load by using a different port
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an appropriate security setting to include in an HTTPS server block?

   • Assl_protocols SSLv3 TLSv1;
   • Bssl_verify_client off;
   • Cssl_ciphers ALL;
   • Dssl_protocols TLSv1.2 TLSv1.3;
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is HTTPS considered essential for secure content delivery over the web?

   • AIt hides the IP address of the server from clients
   • BIt prevents all types of cyberattacks, including DDoS attacks
   • CIt compresses content to reduce bandwidth usage
   • DIt authenticates the server and encrypts communication to protect data from eavesdropping and tampering
   Reveal Solution Discussion Select an answer first