Define the Difference Between a Server Certificate and a Client Certificate F5N3 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company's NGINX server is configured with a certificate that has expired. Users are now seeing browser warnings when they visit the site. What is the most direct consequence of this expired certificate?

   • AThe server can no longer encrypt data in transit.
   • BClients can no longer present their own certificates to the server.
   • CClients cannot verify the server's identity, so the TLS handshake fails or produces a warning.
   • DThe server's private key is automatically revoked.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In a standard TLS handshake without mutual authentication, which certificate is presented?

   • ABoth server and client certificates
   • BNo certificates are presented
   • COnly the client certificate
   • DOnly the server certificate
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In a TLS handshake, which entity presents a server certificate to prove its identity?

   • AThe server
   • BThe certificate authority
   • CThe DNS resolver
   • DThe client
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A small business hosts its website on NGINX. The owner wants customers to see the padlock icon in their browsers. The administrator has a certificate signed by a public CA. What must the administrator do to ensure the certificate is used correctly?

   • APlace the certificate in the website's root directory for browsers to download.
   • BConfigure the ssl_certificate and ssl_certificate_key directives in the NGINX server block.
   • CSet the ssl_verify_client directive to on.
   • DConfigure the ssl_client_certificate directive with the CA's certificate.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company runs an internal web application on NGINX that employees access via HTTPS. The security team wants to ensure that when an employee's browser connects to the application, the browser can verify it is genuinely communicating with the company's server and that the traffic is encrypted. Which configuration action directly satisfies this requirement?

   • AAdd the ssl_verify_client on directive to require browsers to present a certificate.
   • BConfigure NGINX to use a self-signed certificate without installing it on the server.
   • CInstall a client certificate on NGINX and configure the ssl_client_certificate directive.
   • DInstall a server certificate on NGINX and configure the ssl_certificate and ssl_certificate_key directives.
   Reveal Solution Discussion Select an answer first