MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Which protocol commonly uses digital certificates to secure web communication?
a. FTP
b. HTTP
c. HTTPS
d. Telnet
Answer: c. HTTPSexamradar
What is the primary purpose of a Certificate Authority (CA)?
a. Encrypt data traffic
b. Issue and verify digital certificates
c. Route packets
d. Monitor network traffic
Answer: b. Issue and verify digital certificatesigmguru
Which certificate error results when a site’s certificate is signed by an untrusted CA?
a. Expired certificate
b. Name mismatch
c. Certificate not trusted
d. Revoked certificate
Answer: c. Certificate not trustedthemeisle+1
What does CRL stand for in networking security?
a. Certificate Revocation List
b. Certificate Resolution Logic
c. Critical Resource List
d. Certified Root Listing
Answer: a. Certificate Revocation Listsanfoundry
What protocol is used to automate the issuance and management of certificates?
a. SMTP
b. OCSP
c. ACME
d. HTTPS
Answer: c. ACMEcloudflare
Which field in an SSL certificate specifies the domain name protected?
a. Serial number
b. Common Name (CN)
c. Signature
d. Issuer
Answer: b. Common Name (CN)examradar
Why should a certificate be revoked before its expiration date?
a. User’s private key compromised
b. Change of domain owner
c. CA certificate compromised
d. All of the above
Answer: d. All of the abovesanfoundry
Which message in TLS contains the client’s certificate?
a. CertificateRequest
b. ClientHello
c. Certificate
d. ServerHello
Answer: c. Certificatesanfoundry
What does a browser display when connecting to a site with an expired SSL certificate?
a. No warning
b. Security warning
c. Faster loading
d. Redirect
Answer: b. Security warningblogs.emsign+1
Which answer best defines an intermediate certificate?
a. Final certificate in chain
b. Certificate used to bridge trust between root and end-entity
c. Expired certificate
d. CRL certificate
Answer: b. Certificate used to bridge trust between root and end-entityexamradar
What is the role of a CSR (Certificate Signing Request)?
a. Renew certificate
b. Request signed certificate from CA
c. Encrypt data
d. Validate usernames
Answer: b. Request signed certificate from CAexamradar
Which algorithm is considered insecure for SSL/TLS certificates?
a. SHA-256
b. AES
c. MD5
d. RSA
Answer: c. MD5examradar
What occurs if a site uses a self-signed certificate?
a. Highest encryption
b. No browser warning
c. Browser security warnings
d. Extreme trust
Answer: c. Browser security warningsthemeisle+1
Which protocol checks real-time revocation of certificates?
a. DNSSEC
b. OCSP
c. FTP
d. SMTP
Answer: b. OCSPcloudflare
Which certificate version introduced extensions in X.509?
a. Version 1
b. Version 2
c. Version 3
d. Version 4
Answer: c. Version 3sanfoundry
What is a common cause of SSL “hostname mismatch” error?
a. Incorrect CA
b. CN does not match FQDN
c. Expired CA
d. Trusted CA
Answer: b. CN does not match FQDNblogs.emsign+2
What does “certificate chain incomplete” mean?
a. All certificates are present
b. Missing intermediate certificates
c. Expired leaf certificate
d. Trusted CA missing
Answer: b. Missing intermediate certificatesserpstat
Which certificate extension conveys X.500 directory attributes?
a. Basic Constraints
b. Subject directory attributes
c. Key Usage
d. Subject Alternative Name
Answer: b. Subject directory attributessanfoundry
Which cryptographic method protects data in SSL/TLS communication?
a. SHA-256
b. AES
c. MD5
d. DES
Answer: b. AESexamradar
What is the primary use of a CA bundle?
a. Provide root CA only
b. Include intermediate CAs for trust
c. Encrypt all traffic
d. Monitor revoked certificates
Answer: b. Include intermediate CAs for trustserpstat
Which field in an X.509 certificate is NOT standard?
a. Issuer Name
b. Serial Modifier
c. Signature
d. Issuer unique identifier
Answer: b. Serial Modifiersanfoundry
What happens if an SSL certificate is revoked?
a. Increased trust
b. Sites remain accessible
c. Browsers warn users
d. No effect
Answer: c. Browsers warn usersblogs.emsign+1
What is “SNI” in certificate deployment?
a. Secure Name Identifier
b. Server Name Indication
c. Signed Node Instance
d. Secure Network Interface
Answer: b. Server Name Indicationcloudflare
Which phase in SSL handshake verifies client’s certificate?
a. Session negotiation
b. Authentication
c. Encryption setup
d. Termination
Answer: b. Authenticationsanfoundry
Which type of SSL certificate validates the organization most thoroughly?
a. DV (Domain Validation)
b. OV (Organization Validation)
c. EV (Extended Validation)
d. Self-signed
Answer: c. EV (Extended Validation)examradar
What is the main difference between a root and intermediate CA?
a. Root directly issues certificates, intermediate does not
b. Intermediate CA is more secure
c. Root CA never expires
d. Intermediate CA issues root certificates
Answer: a. Root directly issues certificates, intermediate does notserpstat+1
Which problem can be caused by incorrect certificate file order in a chain?
a. Increased security
b. Broken HTTPS
c. Faster handshakes
d. Unlimited trust
Answer: b. Broken HTTPSserpstat+1
Which protocol supports encrypted communication using certificates besides HTTPS?
a. SMTP
b. SSH
c. FTPS
d. IP
Answer: c. FTPScloudflare
Which process ensures a certificate’s expiration is monitored?
a. Manual inspection
b. Auto-renewal
c. Infrequent audits
d. Key rotation
Answer: b. Auto-renewalblogs.emsign
What is the “criticality indicator” in certificate extensions?
a. Must be ignored
b. Signals if extension can be ignored
c. Points out the issuer
d. Sets the expiration date
Answer: b. Signals if extension can be ignoredsanfoundry
A certificate with a mismatched CA bundle may cause which error?
a. Mixed content warning
b. Certificate not trusted
c. Certificate chain incomplete
d. Fast connections
Answer: b. Certificate not trustedserpstat
Which certificate attribute is used for subject alternative names?
a. Key Usage
b. Subject Alternative Name
c. Basic Constraints
d. Signature Algorithm
Answer: b. Subject Alternative Namesanfoundry
What is a reverse certificate in X.509 chains?
a. CA certificate signed by another CA
b. Last certificate in chain
c. Untrusted certificate
d. End-entity certificate
Answer: a. CA certificate signed by another CAsanfoundry
How can certificate issues disrupt VPN connections?
a. Faster authentication
b. Denied access due to invalid certificate
c. Improved security
d. More VPN servers
Answer: b. Denied access due to invalid certificatecloudflare
Which common error occurs if a CA’s certificate expires?
a. Certificate trusted
b. Certificate not trusted
c. Unchanged chain
d. Faster access
Answer: b. Certificate not trustedthemeisle
Why might browsers display “mixed content” warnings on HTTPS sites?
a. No certificate used
b. Some resources are loaded over HTTP
c. Trusted root CA present
d. Correct chain order
Answer: b. Some resources are loaded over HTTPthemeisle+1
Which type of certificate is preferred for multiple subdomains?
a. Wildcard certificate
b. EV certificate
c. Self-signed
d. Organization validation
Answer: a. Wildcard certificatecloudflare
Who is responsible for signing digital certificates in a PKI system?
a. Browser vendor
b. End user
c. Certificate Authority
d. Network administrator
Answer: c. Certificate Authoritystudocu+1
What is the effect of using outdated cryptographic algorithms in certificates?
a. Improved performance
b. Increased vulnerability
c. No effect
d. Automatic renewal
Answer: b. Increased vulnerabilitycloudflare+1
Which field determines when a certificate will expire?
a. Key Usage
b. Validity period
c. Issuer
d. Signature algorithm
Answer: b. Validity periodexamradar
Why should organizations avoid using self-signed certificates for public-facing services?
a. Trusted by all browsers
b. Triggers browser security warnings
c. No encryption
d. Quicker setup
Answer: b. Triggers browser security warningsthemeisle+2
What is an advantage of using OCSP over CRL?
a. OCSP provides real-time status
b. CRL is faster
c. OCSP is less secure
d. CRL supports only root certificates
Answer: a. OCSP provides real-time statuscloudflare
Which certificate problem may be caused by mismatched server hostname and certificate CN?
a. Certificate expired
b. Name mismatch error
c. Expired CA bundle
d. No effect
Answer: b. Name mismatch errorblogs.emsign+1
Why are expired certificates a risk in networking?
a. Prevent handshakes
b. Cause trust errors in browsers
c. Improve encryption
d. Increase CA trust
Answer: b. Cause trust errors in browsersblogs.emsign+1
Which network service often relies on certificates for secure authentication?
a. NTP
b. SMTP over TLS
c. FTP
d. Telnet
Answer: b. SMTP over TLScloudflare
What is a common result of not renewing certificates before their expiration?
a. Uninterrupted service
b. Warning and lost trust
c. Improved security
d. Longer certificate chain
Answer: b. Warning and lost trustblogs.emsign
Which error will browsers show if the certificate chain includes a self-signed certificate?
a. Certificate trusted
b. Security warning
c. Improved trust
d. Quicker handshakes
Answer: b. Security warningserpstat+2
Which field is unique for every SSL certificate and helps track its revocation?
a. Common Name
b. Serial number
c. Validity period
d. Key Usage
Answer: b. Serial numbersanfoundry
What is the preferred method for internal testing of SSL/TLS certificates?
a. Public trusted certificates
b. Self-signed certificates
c. Wildcard certificates
d. EV certificates
Answer: b. Self-signed certificatesexamradar
Which service helps detect if a certificate has been revoked by the CA?
a. OCSP
b. DNSSEC
c. SMTP
d. FQDN
Answer: a. OCSPcloudflare

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info