Identify TLS Connection Errors F5N4 Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   A client attempts to connect to an NGINX server that is configured with `ssl_protocols TLSv1.2 TLSv1.3;`. The client only supports TLS 1.0. Which TLS alert will the server most likely send?

   • Abad_certificate
   • Bhandshake_failure
   • Cprotocol_version
   • Dinsufficient_security
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A user reports intermittent HTTPS connection failures to an NGINX server. The error log shows: 'SSL_do_handshake() failed (SSL: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure) while SSL handshaking'. The server is configured with ssl_protocols TLSv1.2 TLSv1.3; and ssl_ciphers HIGH:!aNULL:!MD5;. Most clients connect successfully. What is the most likely cause of this specific failure?

   • AThe server certificate has expired, causing the client to abort the handshake.
   • BThe client's clock is skewed, causing the certificate validation to fail.
   • CThe client is using an unsupported TLS protocol version, such as TLSv1.1 or earlier.
   • DThe server's ssl_ciphers directive is misconfigured and excludes all ciphers, causing a handshake failure for all clients.
   Reveal Solution Discussion Select an answer first
3. 18foundation · easy

   An NGINX error log contains the line: 'SSL_do_handshake() failed (SSL: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure)'. Which of the following is the most likely cause of this handshake failure?

   • AThe server's hostname does not match the certificate.
   • BThe client and server could not agree on a common cipher suite.
   • CThe client does not trust the server's certificate authority.
   • DThe server certificate has expired.
   Reveal Solution Discussion Select an answer first