Define the Difference Between a Server Certificate and a Client Certificate F5N3 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of a server certificate in TLS/SSL?

   • ATo provide a backup of the server's private key
   • BTo establish trust in the server's identity and enable encrypted communication
   • CTo allow the server to decrypt client traffic without a key exchange
   • DTo authenticate the client to the server
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does a server certificate contribute to secure communication in HTTPS?

   • AIt authenticates the server and enables the TLS handshake that establishes encryption
   • BIt prevents all man-in-the-middle attacks
   • CIt stores the client's encrypted password
   • DIt encrypts the data directly using its public key
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A government agency provides a secure file-transfer portal via NGINX. Each employee has a smart card containing a digital certificate. The agency requires that the portal only accept connections from these smart cards, ensuring that the person accessing the portal is a verified employee. What must NGINX be configured to do?

   • AConfigure the portal to accept any certificate presented by a browser.
   • BPresent the agency's server certificate to the employee's browser.
   • CUse the employee's smart card PIN as a password for the portal.
   • DRequest and verify a client certificate from each connecting employee.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A hospital deploys a patient portal on NGINX. To comply with regulations, the portal must verify that only registered patients can access their records. The hospital issues each patient a certificate. What is the primary purpose of these patient certificates in this setup?

   • ATo authenticate each patient to the NGINX server before access is granted.
   • BTo allow patients to encrypt their own passwords before sending them.
   • CTo encrypt the patient records stored in the hospital's database.
   • DTo authenticate the NGINX server to each patient's browser.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization runs a high-security internal tool behind NGINX. The tool is only accessible from company-issued laptops. The security team wants to ensure that only these laptops can connect, even if a password is stolen. Which mechanism, when configured on NGINX, achieves this by authenticating the laptop to the server?

   • ARestrict access by the laptop's IP address in the NGINX configuration.
   • BRequire each laptop to present a client certificate issued by the company's internal CA.
   • CConfigure the server certificate to include the laptop's hostname.
   • DUse a long and complex password for the tool's login page.
   Reveal Solution Discussion Select an answer first