208.2 Apache Configuration for HTTPS (weight: 3) LPIC-2 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   An Apache server hosts a partner portal that requires client certificates for authentication. The administrator has configured SSLVerifyClient require and SSLCACertificateFile with the partner CA's certificate. Some partners can connect, but others receive a 'certificate verify failed' error. What is the most likely cause?

   • AThe SSLCipherSuite directive is too restrictive.
   • BThe SSLVerifyClient directive is set to 'optional' instead of 'require'.
   • CThe failing partners' certificates are signed by a different intermediate CA that is not included in the SSLCACertificateFile.
   • DThe SSLCertificateChainFile directive is missing from the configuration.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company has received a certificate from a public CA. The certificate file is /etc/ssl/example.crt and the private key is /etc/ssl/example.key. The administrator has configured the virtual host with SSLCertificateFile and SSLCertificateKeyFile. Browsers report that the certificate is not trusted. What is the most likely cause?

   • AThe SSLCACertificateFile directive is missing.
   • BThe SSLCertificateKeyFile directive points to the wrong file.
   • CThe intermediate CA certificate is not being sent by the server.
   • DThe SSLProtocol directive is set to an older version like TLS 1.0.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is 'mixed content' in the context of an HTTPS website?

   • AUsing multiple SSL certificates on one server
   • BLoading some resources (like images or scripts) over HTTP while the page is served over HTTPS
   • CCombining different TLS protocol versions in one connection
   • DServing both HTTP and HTTPS on the same port
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which two directives are required to configure a basic HTTPS virtual host with a certificate and its private key?

   • ASSLSessionCache and SSLUseStapling
   • BSSLCertificateFile and SSLCertificateKeyFile
   • CSSLCACertificateFile and SSLVerifyClient
   • DSSLCipherSuite and SSLProtocol
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which command is commonly used to generate a new private key and a self-signed certificate in one step?

   • Aopenssl ca -in cert.csr -out cert.pem
   • Bopenssl x509 -in cert.pem -text -noout
   • Copenssl s_client -connect localhost:443
   • Dopenssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365
   Reveal Solution Discussion Select an answer first