What is a certificate chain in the context of digital certificates?

A sequence of certificates that links a server's certificate to a trusted root certificate

A set of certificates that are stored on a web server for backup purposes

A group of certificates that are all signed by the same private key

A list of all certificates that have been revoked by a CA

A company runs an internal web application that is only accessible from within the corporate network. They want to use HTTPS but do not want to purchase a certificate from a public CA. Which approach is most appropriate?

Set up an internal CA and distribute its root certificate to all company devices.

Purchase a certificate from a public CA and install it on the internal server.

Use a self-signed certificate and have users ignore the browser warning.

Use HTTP instead of HTTPS because the network is internal.

During the TLS handshake, what is the purpose of the key exchange step?

To negotiate the compression algorithm to be used for the session

To verify the identity of the user by exchanging passwords

To establish a shared session key that both client and server will use for symmetric encryption

To exchange the public keys of the client and server for asymmetric encryption of all data

What is the purpose of a cipher suite in TLS?

To compress the data before encryption

To define the algorithms used for key exchange, encryption, and message authentication

To store the private keys used for the TLS session

To authenticate the user using a username and password

A security analyst is investigating a potential man-in-the-middle attack on a web session. The analyst notices that the browser did not show any certificate warnings. Which condition would allow a MITM attack to succeed without triggering a browser warning?

The attacker has a certificate signed by a CA that is trusted by the victim's browser.

The victim is using an outdated browser.

The attacker uses a self-signed certificate.

The attacker is on the same local network as the victim.

LPI Security Essentials

Domain 2Objective 2

022.2 Web Encryption (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 1)

Part of the 022 Encryption domain, which makes up ~20% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

Questions 1–5

1foundation · easy
What is a certificate chain in the context of digital certificates?
Select an answer first
2application · medium
A company runs an internal web application that is only accessible from within the corporate network. They want to use HTTPS but do not want to purchase a certificate from a public CA. Which approach is most appropriate?
Select an answer first
3foundation · easy
During the TLS handshake, what is the purpose of the key exchange step?
Select an answer first
4foundation · easy
What is the purpose of a cipher suite in TLS?
Select an answer first
5application · medium
A security analyst is investigating a potential man-in-the-middle attack on a web session. The analyst notices that the browser did not show any certificate warnings. Which condition would allow a MITM attack to succeed without triggering a browser warning?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.