// PATH EXAM

🎓 Fundamentals: how it works

8 questions; you pass with 6. It is graded on the server and you will only see your score. If you pass, you can issue your certificate. Review the path first

1. What is Base64? A reversible, keyless encoding: anyone can decode it A digital signature A secure encryption A hash

2. What does a recursive DNS resolver do when the answer is not in its cache? It asks the browser It asks, in order, the root, the TLD server and the domain’s authoritative server It makes up an answer It checks the server’s own hosts file and gives up

3. What is a man-in-the-middle (MitM) attack? Someone who sits between two parties to read or alter what they say A brute-force attack on passwords A virus hiding on the disk An email with a malicious attachment

4. What is the TTL of a DNS record? Its priority over other records Its size in bytes Whether it is encrypted How long resolvers may cache it

5. In TLS 1.3, how is the key that encrypts the session agreed? It is inside the certificate The client sends it encrypted with the server’s RSA key It is a fixed key per domain With an ephemeral Diffie-Hellman exchange: both sides compute the same key without sending it

6. In TLS, what is the server certificate for? To choose the port To compress the connection To directly encrypt all the session data To prove the public key belongs to that domain, signed by a trusted authority

7. Which DNS record says which servers receive a domain’s mail? AAAA CNAME MX TXT

8. What is forward secrecy? That the server keeps every session key That everything is encrypted twice That if the server’s private key is stolen later, past sessions cannot be decrypted That keys never expire