CNIT 34220 EXAM 2 QUESTIONS WITH VERIFIED
ANSWERS
· Protocols
· Addressing
· Redundancy
· Load Balancing - Answers - 4 web services for inbound connections
Proxy - Answers - Web services for outgoing connections
80 - Answers - HTTP nominally runs on port ?
True (a Control session for the base of the HTML data that defines the web page and
Multiple other sessions for pictures, sound, video, etc. that are defined on the page_ -
Answers - T/F: HTTP establishes multiple TCP sessions
SSL - Answers - HTTPS was previously known as ____ (which is now technically TLS)
443 - Answers - HTTPS nominally runs on port ?
· Authenticates the server
· Establishes an encrypted session over which HTTP data is carried
· Requires a digital certificate from a trusted authority to work transparently - Answers -
3 things that HTTPS does
Default page - Answers - what is used when a request is made for the base page or a
directory (www.page.com or www.page.com/support)
False (Multiple sites can exist on the same web server) - Answers - T/F: Only one type
of the same site can exist on the same web server
IP based HTTP site identification - Answers - type of site identification, multiple IP
addresses are bound to the web server's external NIC, but it is an inefficient use of IP
addresses
DNS name HTTP site identification - Answers - type of site identification, there is one IP
address for the whole web server, each site has its own DNS CNAME record that points
to the underlying hostname, the preferred method
DNS name HTTP site identification - Answers - which is preferred between IP based
and DNS name HTTP site identification
, False (each site, not server) - Answers - T/F: HTTPS acquires and assigns certificates
for each server
True (the security is established on an IP basis rather than a name basis) - Answers -
T/F: HTTPS requires a separate IP address for each site
Simple web server - Answers - any software that supports the HTTP protocol, often built
into other applications as a management or control interface or added on top of existing
workstations, does not support web-based applications
True (there is no method of authenticating and authorizing a user) - Answers - T/F: A
simple web server often does not support HTTPS
Single dedicated server - Answers - highly available web servers running in a secure
environment, support both HTTP and HTTPS, IIS and Apache, typically placed in a
DMZ (second layer), usually support server-side scripting
Reverse proxy server - Answers - web server placed in a first layer DMZ, answers the
incoming connection request then makes a connection back to the actual web server,
retrieves the page, and presents it to the requesting node, can add HTTPS level
security to a non-HTTPS enabled web application server, can increase the capacity of a
dynamic web application
static - Answers - The reverse proxy can cache __________ content so the actual web
server only has to generate the dynamically generated content (multiple web servers
can be placed in a second DMZ to further increase capacity)
Load balancing with DNS flagging - Answers - when multiple hosts are associated with
the hostname, DNS server passes out the IP address in a "round robin" fashion,
splitting the load across multiple servers, but one server can still carry the bulk of the
load
Dynamic load balancers - Answers - the load balancer has a separate control channel
with the web servers (used to keep track of current utilization), the requesting node
makes an official request to the load balancer and the load balancer passes the
connection to the least loaded server (the load balancer may decline the connection if
there is no server with available capacity to server the connection)
· Caching
· Security
· Statistics
· Filtering - Answers - 4 benefits of an outbound proxy server
Outbound proxy server - Answers - proxy server located in DMZ, isolates internet traffic
from clients, only works with HTTP (not HTTPS)
ANSWERS
· Protocols
· Addressing
· Redundancy
· Load Balancing - Answers - 4 web services for inbound connections
Proxy - Answers - Web services for outgoing connections
80 - Answers - HTTP nominally runs on port ?
True (a Control session for the base of the HTML data that defines the web page and
Multiple other sessions for pictures, sound, video, etc. that are defined on the page_ -
Answers - T/F: HTTP establishes multiple TCP sessions
SSL - Answers - HTTPS was previously known as ____ (which is now technically TLS)
443 - Answers - HTTPS nominally runs on port ?
· Authenticates the server
· Establishes an encrypted session over which HTTP data is carried
· Requires a digital certificate from a trusted authority to work transparently - Answers -
3 things that HTTPS does
Default page - Answers - what is used when a request is made for the base page or a
directory (www.page.com or www.page.com/support)
False (Multiple sites can exist on the same web server) - Answers - T/F: Only one type
of the same site can exist on the same web server
IP based HTTP site identification - Answers - type of site identification, multiple IP
addresses are bound to the web server's external NIC, but it is an inefficient use of IP
addresses
DNS name HTTP site identification - Answers - type of site identification, there is one IP
address for the whole web server, each site has its own DNS CNAME record that points
to the underlying hostname, the preferred method
DNS name HTTP site identification - Answers - which is preferred between IP based
and DNS name HTTP site identification
, False (each site, not server) - Answers - T/F: HTTPS acquires and assigns certificates
for each server
True (the security is established on an IP basis rather than a name basis) - Answers -
T/F: HTTPS requires a separate IP address for each site
Simple web server - Answers - any software that supports the HTTP protocol, often built
into other applications as a management or control interface or added on top of existing
workstations, does not support web-based applications
True (there is no method of authenticating and authorizing a user) - Answers - T/F: A
simple web server often does not support HTTPS
Single dedicated server - Answers - highly available web servers running in a secure
environment, support both HTTP and HTTPS, IIS and Apache, typically placed in a
DMZ (second layer), usually support server-side scripting
Reverse proxy server - Answers - web server placed in a first layer DMZ, answers the
incoming connection request then makes a connection back to the actual web server,
retrieves the page, and presents it to the requesting node, can add HTTPS level
security to a non-HTTPS enabled web application server, can increase the capacity of a
dynamic web application
static - Answers - The reverse proxy can cache __________ content so the actual web
server only has to generate the dynamically generated content (multiple web servers
can be placed in a second DMZ to further increase capacity)
Load balancing with DNS flagging - Answers - when multiple hosts are associated with
the hostname, DNS server passes out the IP address in a "round robin" fashion,
splitting the load across multiple servers, but one server can still carry the bulk of the
load
Dynamic load balancers - Answers - the load balancer has a separate control channel
with the web servers (used to keep track of current utilization), the requesting node
makes an official request to the load balancer and the load balancer passes the
connection to the least loaded server (the load balancer may decline the connection if
there is no server with available capacity to server the connection)
· Caching
· Security
· Statistics
· Filtering - Answers - 4 benefits of an outbound proxy server
Outbound proxy server - Answers - proxy server located in DMZ, isolates internet traffic
from clients, only works with HTTP (not HTTPS)
