A user reports that their browser displays a warning when visiting a company website. The warning says the certificate is not trusted. The certificate was issued by an internal CA that is not in the browser's trust store. What is the most likely reason for the warning?

The certificate was not issued by a CA that the browser trusts.

The certificate's public key does not match the server's private key.

The certificate does not include the correct domain name.

A security administrator is troubleshooting a browser warning that says the certificate is not valid because it has been revoked. The administrator checks the certificate and sees it is not expired. What should the administrator do to confirm the revocation status?

Reinstall the certificate on the server.

Check the certificate's validity period.

Check the certificate revocation list (CRL) or use OCSP.

Verify that the certificate's public key matches the private key.

A security engineer is configuring a web server to support TLS 1.3. The engineer wants to ensure that the server uses the most secure key exchange method. Which key exchange method should the engineer configure?

ECDHE (Elliptic Curve Diffie-Hellman Ephemeral).

Pre-shared key (PSK) without forward secrecy.

A security analyst is explaining to a junior administrator how a browser establishes a secure session with a web server. The analyst wants to emphasize the step where the server proves its identity to the browser. Which part of the TLS handshake accomplishes this?

The client generates a pre-master secret and encrypts it with the server's public key.

The client sends its digital certificate to the server.

The client and server agree on a cipher suite.

The server sends its digital certificate to the client.

LPI Security Essentials

Domain 2Objective 2

022.2 Web Encryption (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 2)

Part of the 022 Encryption domain, which makes up ~20% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

Questions 6–10

6foundation · easy
Which of the following is a deprecated protocol that should not be used for web encryption?
Select an answer first
7application · medium
A user reports that their browser displays a warning when visiting a company website. The warning says the certificate is not trusted. The certificate was issued by an internal CA that is not in the browser's trust store. What is the most likely reason for the warning?
Select an answer first
8application · medium
A security administrator is troubleshooting a browser warning that says the certificate is not valid because it has been revoked. The administrator checks the certificate and sees it is not expired. What should the administrator do to confirm the revocation status?
Select an answer first
9expert · medium
A security engineer is configuring a web server to support TLS 1.3. The engineer wants to ensure that the server uses the most secure key exchange method. Which key exchange method should the engineer configure?
Select an answer first
10application · medium
A security analyst is explaining to a junior administrator how a browser establishes a secure session with a web server. The analyst wants to emphasize the step where the server proves its identity to the browser. Which part of the TLS handshake accomplishes this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.