An organization runs multiple HTTPS services on a single Apache server with one IP address. Each service has a different hostname and a distinct certificate. The administrator has configured SNI and separate VirtualHost blocks. However, when clients connect using an older browser that does not support SNI, they receive the default certificate. What is the MOST likely reason for this behavior?

The SSLCertificateKeyFile directive is missing from the non-default VirtualHost blocks.

The SSLProtocol directive is set differently in each VirtualHost block.

The ServerName directive is misspelled in the VirtualHost blocks.

The first VirtualHost block on port 443 is configured as the default and its certificate is presented to non-SNI clients.

What is a common characteristic of a Man-in-the-Middle (MITM) attack on TLS?

The attacker exploits a buffer overflow in the TLS implementation to execute arbitrary code

The attacker guesses the session key by analyzing the encrypted traffic

The attacker intercepts and potentially alters communication between client and server without either party detecting it

The attacker floods the server with TLS handshake requests to exhaust its resources

A company's internal application is hosted on Apache and is accessed by employees from their laptops. The security policy requires that only employees with a valid company-issued client certificate can access the application. The administrator has already configured the server to require and verify client certificates. Which additional Apache directive is needed to ensure that only certificates issued by the company's internal CA are accepted?

SSLCACertificateFile /etc/ssl/certs/internal-ca.crt

SSLCertificateFile /etc/ssl/certs/server.crt

LPIC-3 Security

Domain 1Objective 2

325.2 X.509 Certificates for Encryption, Signing and Authentication (weight: 4) LPIC-3-SECURITY Practice Questions (Page 1)

Part of the Topic 325: Cryptography domain, which makes up ~28% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

Questions 1–5

1application · medium
An organization runs multiple HTTPS services on a single Apache server with one IP address. Each service has a different hostname and a distinct certificate. The administrator has configured SNI and separate VirtualHost blocks. However, when clients connect using an older browser that does not support SNI, they receive the default certificate. What is the MOST likely reason for this behavior?
Select an answer first
2foundation · easy
What is a common characteristic of a Man-in-the-Middle (MITM) attack on TLS?
Select an answer first
3application · medium
A company's internal application is hosted on Apache and is accessed by employees from their laptops. The security policy requires that only employees with a valid company-issued client certificate can access the application. The administrator has already configured the server to require and verify client certificates. Which additional Apache directive is needed to ensure that only certificates issued by the company's internal CA are accepted?
Select an answer first
4foundation · easy
Which Apache directive enables OCSP stapling?
Select an answer first
5foundation · easy
Which Apache directive is used to require client certificate authentication?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

325.2 X.509 Certificates for Encryption, Signing and Authentication (weight: 4) LPIC-3-SECURITY Practice Questions (Page 1)

Questions 1–5

What is a common characteristic of a Man-in-the-Middle (MITM) attack on TLS?

Which Apache directive enables OCSP stapling?

Which Apache directive is used to require client certificate authentication?

Keep studying — Topic 325: Cryptography