Identify TLS Connection Errors F5N4 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   An NGINX server is configured with `ssl_ciphers HIGH:!aNULL:!MD5;`. A client attempts to connect using only the cipher suite `TLS_RSA_WITH_AES_128_CBC_SHA`. The connection fails. Which of the following is the most likely cause?

   • AThe client's TLS version is too old.
   • BThe client's cipher suite is not in the server's allowed list.
   • CThe server's hostname does not match the certificate.
   • DThe server's certificate is expired.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A user attempts to access a website and receives a browser warning: 'Your connection is not private' with the error 'NET::ERR_CERT_DATE_INVALID'. Which certificate validation error is this?

   • AThe certificate has expired.
   • BThe certificate hostname does not match the domain.
   • CThe certificate was revoked by the CA.
   • DThe certificate is self-signed.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   During a TLS handshake, the server sends an alert with the description `insufficient_security`. What does this alert indicate?

   • AThe negotiated security parameters are considered too weak.
   • BThe client's certificate is not trusted.
   • CThe client and server could not agree on a TLS version.
   • DThe server's certificate has expired.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A client reports a TLS handshake failure with an NGINX server. The error log shows only: 'SSL_do_handshake() failed (SSL: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure)'. You need to determine whether the failure is due to a protocol version mismatch or a cipher suite mismatch. Which NGINX configuration directive should you enable to get more detailed handshake information?

   • Aerror_log /var/log/nginx/error.log debug;
   • Bssl_protocols TLSv1.2 TLSv1.3;
   • Cssl_verify_client on;
   • Dssl_session_cache shared:SSL:10m;
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An administrator needs to trace TLS handshake errors in NGINX. Which directive should be set to 'debug' to enable detailed TLS debugging in the error log?

   • Assl_ciphers
   • Berror_log
   • Caccess_log
   • Dssl_protocols
   Reveal Solution Discussion Select an answer first