What is the primary purpose of the SSL/TLS handshake?

To verify the client's IP address against a certificate's subject alternative name

To compress the data before encryption to reduce bandwidth usage

To negotiate cryptographic parameters and authenticate the server before any application data is transmitted

To encrypt all application data using a static pre-shared key configured by the administrator

An administrator has enabled OCSP stapling on an Apache server. To verify that stapling is working correctly, the administrator uses openssl s_client to connect to the server. Which output from the command would confirm that OCSP stapling is functioning?

A line showing 'Verify return code: 0 (ok)'

A line showing 'SSL-Session: Protocol: TLSv1.3'

A line showing 'Cipher is AES256-GCM-SHA384'

A line showing 'OCSP Response Status: successful'

What is the purpose of the SSLCACertificateFile directive in the context of client certificate authentication?

To specify the server's certificate chain

To specify the client's private key

To specify the CA certificates used to verify client certificates

To specify the certificate revocation list

LPIC-3 Security

Domain 1Objective 2

325.2 X.509 Certificates for Encryption, Signing and Authentication (weight: 4) LPIC-3-SECURITY Practice Questions (Page 6)

Part of the Topic 325: Cryptography domain, which makes up ~28% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

Questions 26–30

26foundation · easy
What is the primary purpose of the SSL/TLS handshake?
Select an answer first
27foundation · easy
Which OpenSSL command is used to test a TLS connection to a remote server?
Select an answer first
28application · medium
An administrator has enabled OCSP stapling on an Apache server. To verify that stapling is working correctly, the administrator uses openssl s_client to connect to the server. Which output from the command would confirm that OCSP stapling is functioning?
Select an answer first
29foundation · easy
What is the purpose of the SSLCACertificateFile directive in the context of client certificate authentication?
Select an answer first
30foundation · easy
Which TLS version is the first to require forward secrecy for all key exchanges?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

325.2 X.509 Certificates for Encryption, Signing and Authentication (weight: 4) LPIC-3-SECURITY Practice Questions (Page 6)

Questions 26–30

What is the primary purpose of the SSL/TLS handshake?

Which OpenSSL command is used to test a TLS connection to a remote server?

An administrator has enabled OCSP stapling on an Apache server. To verify that stapling is working correctly, the administrator uses openssl s_client to connect to the server. Which output from the command would confirm that OCSP stapling is functioning?

What is the purpose of the SSLCACertificateFile directive in the context of client certificate authentication?

Which TLS version is the first to require forward secrecy for all key exchanges?

Keep studying — Topic 325: Cryptography