Implementing TLS for Applications

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security for Public Access

What you'll be asked

  1. Which protocol is the modern, secure successor to SSL that should be used for protecting data in transit?
  2. When configuring a TLS certificate for a public-facing web application, what is the primary purpose of the 'Chain of Trust'?
  3. Which of the following is a critical best practice when implementing TLS for a public API?
  4. What is the primary function of HTTP Strict Transport Security (HSTS) in a web application's security configuration?
  5. In a scenario where you are using Perfect Forward Secrecy (PFS), what happens if the server's long-term private key is compromised in the future?

Answers and explanations come after you submit.