Test your SSL/TLS knowledge with a free interactive quiz — 31 questions with answers and explanations. No signup needed to play.
Question 1/12Score 0
An organization is worried about the "harvest now, decrypt later" threat, where an adversary records encrypted traffic today hoping to decrypt it once they obtain the server's key. What mitigates this risk today?
In this round
An organization is worried about the "harvest now, decrypt later" threat, where an adversary records encrypted traffic today hoping to decrypt it once they obtain the server's key. What mitigates this risk today?
What is TLS session resumption used for?
A load balancer terminates TLS and forwards traffic to backend servers over plain, unencrypted HTTP within the same data center. What is the primary risk this introduces?
Why would a server operator disable support for older cipher suites like RC4 or export-grade ciphers?
What is contained in a TLS certificate?
What problem do certificate revocation mechanisms like OCSP and CRLs solve?
What does perfect/forward secrecy (PFS) protect against?
What is the role of a Certificate Authority (CA) in the TLS trust model?
What does SNI (Server Name Indication) allow a TLS server to do?
A production site's certificate expired overnight and users are seeing browser security warnings. What is the most direct fix and the better long-term prevention?
Which TLS version is currently recommended as the security and performance baseline for new systems?
A server is configured with a valid leaf certificate but fails to serve the required intermediate certificate. What is the likely symptom?