Define the Difference Between a Server Certificate and a Client Certificate F5N3 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In which scenario is a client certificate typically required?

   • AWhen a client wants to bypass the certificate authority
   • BWhen a server needs to verify the identity of a client before granting access
   • CWhen a web server needs to authenticate itself to a browser
   • DWhen a client wants to encrypt its traffic without a server certificate
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the purpose of a client certificate in a TLS handshake?

   • ATo allow the server to verify the identity of the client
   • BTo speed up the TLS handshake
   • CTo encrypt the client's data before sending
   • DTo replace the need for a server certificate
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An NGINX administrator must secure a B2B API. The API is consumed by two partner companies. Partner A requires that the API server present a certificate signed by a public CA. Partner B requires that its own client certificate be verified by the server. The administrator wants a single NGINX configuration to satisfy both partners. What is the correct approach?

   • AConfigure a public-CA-signed server certificate and enable ssl_verify_client on with a CA file containing Partner B's CA.
   • BUse two separate NGINX servers, one for each partner, with different certificate configurations.
   • CEnable ssl_verify_client optional_no_ca to allow both partners to connect without verification.
   • DConfigure only a client certificate for Partner B and no server certificate.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An NGINX administrator is setting up TLS for a new API endpoint. The endpoint must be accessible to external partners, and each partner must present a certificate so NGINX can confirm which partner is calling. The administrator also needs the partners to trust that they are reaching the correct server. Which combination of certificate configurations is required?

   • AA single certificate that serves as both the server and client certificate for all parties.
   • BA server certificate on NGINX and client certificates issued to each partner, with ssl_verify_client on.
   • COnly client certificates on NGINX, with no server certificate configured.
   • DOnly a server certificate on NGINX, with no client certificate configuration.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary role of a server certificate in a TLS connection?

   • ATo encrypt all data transmitted between client and server
   • BTo authenticate the server's identity to the client
   • CTo provide a backup copy of the server's private key
   • DTo authenticate the client's identity to the server
   Reveal Solution Discussion Select an answer first