208.2 Apache Configuration for HTTPS (weight: 3) LPIC-2 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which Apache directive is used to require clients to present a certificate during the TLS handshake?

   • ASSLVerifyClient require
   • BSSLCertificateFile require
   • CSSLProtocol require
   • DSSLCipherSuite require
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In an HTTPS connection, what role does the server's digital certificate play?

   • AIt lists all clients allowed to access the server
   • BIt provides the client with the server's public key and identity information
   • CIt stores the server's private key for decrypting incoming traffic
   • DIt encrypts the session key used for the connection
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which Apache directive is used to specify the file containing the CA certificates that form the trust chain?

   • ASSLCertificateFile
   • BSSLProtocol
   • CSSLCertificateKeyFile
   • DSSLCACertificateFile
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A web application served by Apache is being migrated from HTTP to HTTPS. After enabling HTTPS, the administrator notices that some pages load correctly but others show a warning in the browser about mixed content. What is the most likely cause?

   • AThe SSLCertificateFile directive points to a self-signed certificate.
   • BSome resources on the page are referenced with absolute HTTP URLs.
   • CThe SSLProtocol directive is set to an older version like TLS 1.0.
   • DThe HTTP virtual host is still listening on port 80.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has a web server with a certificate signed by an internal CA. The CA's root certificate is distributed to all client machines. The Apache configuration includes SSLCertificateFile and SSLCertificateKeyFile. Clients can connect without warnings, but the administrator wants to ensure that the server also sends the intermediate CA certificate. What should be added to the virtual host configuration?

   • ASSLVerifyClient require
   • BSSLCertificateKeyFile /path/to/intermediate.crt
   • CSSLCACertificateFile /path/to/intermediate.crt
   • DSSLCertificateChainFile /path/to/intermediate.crt
   Reveal Solution Discussion Select an answer first