Title: Mod 11 Quiz
Course: CIS 208: Linux/UNIX III: Intermediate System Administration, Networking, and Security ~ For IGNITE Review

Q: Fake SSL certificates can be created for a website to impersonate another website.
- True
- False
A: True

Q: The current version of openssl:
- Is vulnerable to HeartBleed.
- Has been updated several times recently.
- Only works on webservers.
- No longer requires key files.
A: Has been updated several times recently.

Q: A certificate authority needs to have a certificate.
- True
- False
A: True

Q: Browsers will generate an error if:
- The hostname doesn't match the certificate's common name.
- The certificate authority is unknown.
- The certificate has expired.
- The website uses php.
A: The hostname doesn't match the certificate's common name.; The certificate authority is unknown.; The certificate has expired.

Q: Organizations can create a custom certificate authority for development and testing purposes.
- True
- False
A: True

Q: The Common Name of a certificate is chosen when creating:
- The CSR.
- The CA.
- The key file.
- The certificate file.
A: The CSR.

Q: The key file:
- Should not be stored on a webserver.
- Needs to be readable by the httpd process.
- Needs to be sent with the CSR to the CA.
- Can safely be deleted after the certificate has arrived.
A: Needs to be readable by the httpd process.

Q: The files for a CA:
- Should reside on all webservers.
- Should have restricted access.
- Are typically kept in /etc/pki/tls.
- Should reside on the primary webserver only.
A: Should have restricted access.; Are typically kept in /etc/pki/tls.

Q: SSL certificates only work with webservers, and not with email or ftp sites.
- True
- False
A: False