What is the purpose of OCSP stapling in TLS?

To verify the client's certificate revocation status

To replace the certificate with a new one automatically

To encrypt the certificate chain using OCSP

To allow the server to include the certificate's revocation status in the handshake, reducing client queries to the CA

A company wants to secure access to a sensitive internal web application. They require that users authenticate using client certificates, but they also want to ensure that the client certificate is still valid and not revoked. Which Apache configuration should be used to enforce this requirement?

SSLVerifyClient require and SSLVerifyDepth 10

SSLVerifyClient optional and SSLCARevocationFile /etc/ssl/crl/ca.crl

SSLVerifyClient require and SSLCACertificateFile /etc/ssl/certs/ca.crt

SSLVerifyClient require and SSLCARevocationFile /etc/ssl/crl/ca.crl

An administrator manages an Apache server with a single public IP address that must host two different HTTPS websites: shop.example.com and blog.example.com. Each site has its own certificate. The administrator has created two VirtualHost blocks, each with its own SSLCertificateFile and SSLCertificateKeyFile directives. What additional configuration is required to ensure each site presents the correct certificate?

Add the SSLProtocol TLSv1.2 directive to each VirtualHost block.

Add the Listen 443 directive to each VirtualHost block.

Add the SSLEngine on directive to each VirtualHost block.

Add the ServerName directive to each VirtualHost block.

A company's Apache web server currently supports TLS 1.0, 1.1, 1.2, and 1.3. A security scan has flagged the use of TLS 1.0 and 1.1 as a vulnerability. The administrator needs to disable these older versions while maintaining compatibility with modern browsers. Which SSLProtocol directive should be used?

SSLProtocol all -TLSv1 -TLSv1.1

LPIC-3 Security

Domain 1Objective 2

325.2 X.509 Certificates for Encryption, Signing and Authentication (weight: 4) LPIC-3-SECURITY Practice Questions (Page 2)

Part of the Topic 325: Cryptography domain, which makes up ~28% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

Questions 6–10

6foundation · easy
Which Apache directive is used to specify the file containing the server's private key in an SSL virtual host?
Select an answer first
7foundation · easy
What is the purpose of OCSP stapling in TLS?
Select an answer first
8application · medium
A company wants to secure access to a sensitive internal web application. They require that users authenticate using client certificates, but they also want to ensure that the client certificate is still valid and not revoked. Which Apache configuration should be used to enforce this requirement?
Select an answer first
9application · medium
An administrator manages an Apache server with a single public IP address that must host two different HTTPS websites: shop.example.com and blog.example.com. Each site has its own certificate. The administrator has created two VirtualHost blocks, each with its own SSLCertificateFile and SSLCertificateKeyFile directives. What additional configuration is required to ensure each site presents the correct certificate?
Select an answer first
10application · medium
A company's Apache web server currently supports TLS 1.0, 1.1, 1.2, and 1.3. A security scan has flagged the use of TLS 1.0 and 1.1 as a vulnerability. The administrator needs to disable these older versions while maintaining compatibility with modern browsers. Which SSLProtocol directive should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

325.2 X.509 Certificates for Encryption, Signing and Authentication (weight: 4) LPIC-3-SECURITY Practice Questions (Page 2)

Questions 6–10

Which Apache directive is used to specify the file containing the server's private key in an SSL virtual host?

What is the purpose of OCSP stapling in TLS?

A company wants to secure access to a sensitive internal web application. They require that users authenticate using client certificates, but they also want to ensure that the client certificate is still valid and not revoked. Which Apache configuration should be used to enforce this requirement?

Keep studying — Topic 325: Cryptography