What is the purpose of the SSLCipherSuite directive in Apache?

To specify which client certificates are trusted

To set the certificate file path

To enable or disable SSL for the virtual host

To define which cryptographic algorithms are acceptable for the TLS handshake

An organization requires that only clients presenting a certificate issued by their internal CA can access a specific Apache virtual host. The CA certificate is stored at /etc/ssl/ca.crt. Which set of directives will enforce this requirement?

SSLVerifyClient require and SSLCACertificateFile /etc/ssl/ca.crt

SSLVerifyClient optional and SSLCACertificateFile /etc/ssl/ca.crt

SSLVerifyClient require and SSLCertificateChainFile /etc/ssl/ca.crt

SSLVerifyClient require and SSLCertificateFile /etc/ssl/ca.crt

LPI LPIC-2:Linux Engineer (201-450)

Domain 9Objective 2

208.2 Apache Configuration for HTTPS (weight: 3) LPIC-2 Practice Questions (Page 3)

Part of the Topic 208: HTTP Services domain, which makes up ~11% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

8concepts

Questions 11–15

11expert · hard
A security team requires that all connections to an Apache server use only TLS 1.2 and TLS 1.3, and that the server prefer the client's cipher order. The administrator has set SSLProtocol to 'all -SSLv3 -TLSv1 -TLSv1.1' and SSLCipherSuite to a list of secure ciphers. However, a test shows that the server is using its own cipher order instead of the client's. What directive is missing?
Select an answer first
12foundation · easy
What is the purpose of the SSLCipherSuite directive in Apache?
Select an answer first
13application · easy
An administrator needs to generate a self-signed certificate for a temporary internal service. The certificate will be used by Apache, and the administrator wants to avoid being prompted for a passphrase when Apache starts. Which openssl command option ensures the private key is stored without encryption?
Select an answer first
14foundation · easy
Which directive specifies the CA certificates used to verify client certificates?
Select an answer first
15application · medium
An organization requires that only clients presenting a certificate issued by their internal CA can access a specific Apache virtual host. The CA certificate is stored at /etc/ssl/ca.crt. Which set of directives will enforce this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-2” is a trademark of its owner, used for identification only.

208.2 Apache Configuration for HTTPS (weight: 3) LPIC-2 Practice Questions (Page 3)

Questions 11–15

What is the purpose of the SSLCipherSuite directive in Apache?

Which directive specifies the CA certificates used to verify client certificates?

An organization requires that only clients presenting a certificate issued by their internal CA can access a specific Apache virtual host. The CA certificate is stored at /etc/ssl/ca.crt. Which set of directives will enforce this requirement?

Keep studying — Topic 208: HTTP Services