EM 602 – Which port is used for standard, unencrypted HTTP

Question 1

1. Which port is used for standard, unencrypted HTTP Web traffic?

1. TCP/IP port 21
2. TCP/IP port 22
3. TCP/IP port 80
4. TCP/IP port 443

Question 2

1. When you open a Web page over HTTP, the HyperText Transfer Protocol, the data on that page is sent in:

1. Secure Sockets Layer (SSL).
2. clear text.
3. binary format.
4. ASCII.

Question 3

1. In the lab, you found that clear text can be read by anyone who intercepts it and is susceptible to:

1. man-in-the-middle attacks.
2. denial-of-service attacks.
3. brute force attacks.
4. fake SSL certificates.

Question 4

1. Which of the following is unsafe when dealing with sensitive data such as credit cards, banking data, and passwords?

1. Digital certificates
2. Relying on certificates for encrypting the data between client and server
3. An SSL certificate that is bound to the Domain Name System (DNS)
4. Clear text

Question 5

1. Active tampering and surveillance attacks, as well as passive surveillance attacks, are frequently carried out on:

1. any unencrypted Web traffic.
2. digital certificates.
3. SSL certificates that it are bound to the Domain Name System (DNS).
4. certificates that are purchased from a trusted third party.

Question 6

1. In order to ensure safe and secure communication between a Web server and a client, the server should use:

1. clear text.
2. HTTP, the HyperText Transfer Protocol.
3. HTTPS, the HyperText Transfer Protocol Secure.
4. binary format.

Question 7

1. Which port is used for secure, encrypted HTTPS Web traffic?

1. TCP/IP port 21
2. TCP/IP port 22
3. TCP/IP port 80
4. TCP/IP port 443

Question 8

1. The Secure Sockets Layer which relies on __________ for encrypting the data between client and server.

1. digital signatures
2. certificates
3. private keys
4. public keys

Question 9

1. Which of the following prevents a hacker from replacing the login page of a Web site with his own page?

1. HTTP
2. clear text
3. An SSL certificate that is bound to the Domain Name System (DNS), or the name of the Web site
4. A self-generated certificate that is trusted by default

Question 10

1. Which of the following statements is true regarding SSL certificates?

1. They cannot be self-generated.
2. They can be purchased from a trusted third-party certificate authority.
3. They cannot prevent a hacker from replacing the login page of a Web site with his own page.
4. They cannot provide end-to-end encryption of the Web traffic.

Question 11

1. Self-generated certificates will __________, which will help prevent those with malicious intent from generating a trusted certificate for their own purposes.

1. not be trusted by default
2. be verified by a third party
3. be created by Internet Information Services Manager
4. include the organization’s digital signature

Question 12

1. In the lab, you used the __________ to create a digital server certificate and bind the certificate to a specific Web server.

1. PowerShell
2. The Group Policy Management tool
3. Windows Server Manager
4. Internet Information Services (IIS) Manager

Question 13

1. When you are creating a certificate, which process does the certificate authority use to guarantee the authenticity of the certificate?

1. A certificate authority will apply its own digital signature to the certificate.
2. A certificate authority will change the setting of the certificate so it is accepted by default.
3. A certificate authority will add its own private key to the certificate.
4. A certificate authority will decrypt the data.

Question 14

1. Which of the following is the primary content of a digital certificate used in SSL?

1. The public key
2. The private key
3. The keyring
4. Binary code

Question 15

1. There is a(n) __________ on all certificates so they will need to be replaced at some point.

1. creation date
2. expiration date
3. default setting
4. temporary keyring

Question 16

1. Which of the following shows the Web server used to generate a certificate?

1. The digital signature
2. The private key
3. The certification path
4. The Secure Socket Layer (SSL)

Question 17

1. Why did the certificate in this lab’s example result in an error when you visited the Web site?

1. The certificate was not trusted by default because it was purchased from a third party.
2. The certificate was not trusted by default because it was self-signed.
3. The certificate was not trusted by default because the public key was missing.
4. The certificate was not trusted by default because HTTP was used.

Question 18

1. What is the root of the certificate created in the lab?

1. Target08IIS
2. Target09IIS
3. Target10IIS
4. Target12IIS

Question 19

1. In the lab, the certificate path indicated that the CA Root certificate was not trusted because it:

1. is not in the Trusted Root Certificate Authorities store
2. does not have a private key.
3. does not have a public key.
4. was not self-generated.

Question 20

1. What can you do if a certificate is not in the Trusted Root Certificate Authorities store?

1. Change the private key.
2. Change the expiration date.
3. Purchase a certificate from a trusted certificate authority.
4. Add your own digital signature to the certificate.