Define the Difference Between a Server Certificate and a Client Certificate F5N3 Practice Questions (Page 4)

Questions 16–20

1. 16application · easy

   A company's NGINX server is being migrated from HTTP to HTTPS. The administrator has obtained a server certificate and wants to ensure that all traffic to the server is encrypted. What is the primary function of the server certificate in this migration?

   • AIt prevents unauthorized users from accessing the server's admin panel.
   • BIt allows the server to authenticate clients before they connect.
   • CIt enables the server to establish encrypted TLS sessions with clients.
   • DIt encrypts the server's configuration files on disk.
   Reveal Solution Discussion Select an answer first
2. 17application · easy

   A startup deploys a public NGINX web server. The CEO wants customers to see a padlock icon in their browsers and be assured the site is legitimate. The administrator has a certificate signed by a public CA. What is the primary role of this certificate in the TLS handshake?

   • AIt encrypts all data stored on the server's hard drive.
   • BIt authenticates the client's identity to the server.
   • CIt prevents unauthorized users from accessing the server's filesystem.
   • DIt authenticates the server's identity to the client and establishes an encrypted session.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the key difference between a server certificate and a client certificate in a TLS handshake?

   • AServer certificates authenticate the server to the client, while client certificates authenticate the client to the server
   • BServer certificates are encrypted, while client certificates are not
   • CServer certificates contain a public key, while client certificates contain a private key
   • DServer certificates are issued by a CA, while client certificates are self-signed
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A financial services firm exposes a customer portal through NGINX. The compliance team requires that only registered customers with a valid digital identity can access the portal, and the server must positively verify each customer's identity before allowing any request. Which NGINX configuration approach meets this requirement?

   • AUse the auth_basic directive with a username and password file.
   • BSet ssl_verify_client optional_no_ca to allow clients to connect without a certificate.
   • CConfigure ssl_certificate and ssl_certificate_key with the server's certificate.
   • DConfigure ssl_verify_client on and ssl_client_certificate to point to the CA that issued customer certificates.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A remote employee connects to a corporate NGINX VPN gateway. The gateway is configured to require a client certificate. What does the gateway verify when the employee's client presents its certificate?

   • AThat the gateway's own server certificate is trusted by the employee's client.
   • BThat the employee's password matches the certificate's subject.
   • CThat the certificate is valid and was issued by a trusted CA, thereby authenticating the employee.
   • DThat the employee's IP address matches the certificate's IP extension.
   Reveal Solution Discussion Select an answer first