// PATH EXAM

🎓 Fundamentals: how it works

8 questions; you pass with 6. It is graded on the server and you will only see your score. If you pass, you can issue your certificate. Review the path first

1. What is Base64? A digital signature A hash A secure encryption A reversible, keyless encoding: anyone can decode it

2. In TLS, what is the server certificate for? To choose the port To directly encrypt all the session data To prove the public key belongs to that domain, signed by a trusted authority To compress the connection

3. In TLS 1.3, how is the key that encrypts the session agreed? The client sends it encrypted with the server’s RSA key It is inside the certificate It is a fixed key per domain With an ephemeral Diffie-Hellman exchange: both sides compute the same key without sending it

4. Which DNS record says which servers receive a domain’s mail? TXT MX CNAME AAAA

5. What is a man-in-the-middle (MitM) attack? A brute-force attack on passwords A virus hiding on the disk Someone who sits between two parties to read or alter what they say An email with a malicious attachment

6. What is the TTL of a DNS record? Whether it is encrypted How long resolvers may cache it Its priority over other records Its size in bytes

7. What is forward secrecy? That keys never expire That everything is encrypted twice That if the server’s private key is stolen later, past sessions cannot be decrypted That the server keeps every session key

8. When you sign in to another site "with Google" (OpenID Connect), what does that site receive? Full access to your Gmail Always your phone number An identity token signed by Google that says who you are, without your password Your Google password