CNIT 34220 FINAL EXAM QUESTIONS WITH VERIFIED
ANSWERS
Examples of Inbound Web Service Connections - Answers - protocols, addressing,
redundancy, load balancing
Examples of Outbound Web Service Connections - Answers - proxy servers
What port does HTTP use? - Answers - Port 80
HTTP is a __________ protocol - Answers - simple
TCP sessions established by HTTP - Answers - 1) "Control" session for the base HTML
data that defines the webpage
2) Multiple other sessions for the content defined on the page
What port does HTTPS use? - Answers - Port 443
T/F: HTTPS authenticates the server - Answers - true
T/F: HTTPS does not require a digital certificate - Answers - False, HTTPS requires a
cert from a trusted certificate authority to work transparently (if the cert authority is not
trusted the browser will alert the user)
T/F: Multiple sites can exist on the same web server - Answers - True, each site should
consist of a unique DNS identifier
Basic steps in Web Server Configuration: - Answers - 1) Define a default page to be
used when a request is made for the base page or a directory
2) Define sites
What does CNAME do? - Answers - CNAME points to the underlying host name of a
web server (ex: www.site.com is CNAMED at web1.site.com)
T/F: IP Based HTTP Site Identification is the most efficient - Answers - F: it is an
inefficient use of IP addresses and therefore frowned upon by ICANN b/c multiple IP
addresses are bound to the web server's external NIC
Each site has its own underlying DNS "A" record - Answers - IP Based HTTP Site
Identification
Each site has its own DNS "CNAME" record that points to the underlying hostname -
Answers - DNS Name HTTP Site Identification
, What is the preferred method of HTTP Site Identification? - Answers - DNS Name HTTP
Site Identification
(there is one IP address for the server = more efficient use of IP addresses)
How does a web server decide which page to serve in DNS Name HTTP Site
Identification? - Answers - Based on the DNS entry from the HTTP Get from the URL
Basic HTTPS site configuration - Answers - 1) Acquire and assign certificates for each
site
2)Create a redirect page to send user from http --> https://www.site.com
3)Use separate IP addresses for each site
T/F: HTTPS security is established on an IP basis rather than a name basis - Answers -
True
(this is why separate IPs are required for each site)
T/F: Simple Servers always support HTTPS - Answers - F: Simple servers often DO
NOT support HTTPS
Disadvantages of Simple Servers - Answers - 1) often added on top of existing
workstations which creates significant security issues
2) doesn't support HTTPS
3) often offer no method of authenticating
A highly available web server running in a secure environment is a
____________________________________ - Answers - Single Dedicated Server
T/F: Single Dedicated Servers support both HTTP and HTTPS - Answers - True
Where are Single Dedicated Servers typically placed? - Answers - in a DMZ
What is the reverse proxy server located in the first layer DMZ responsible for? -
Answers - Answering the incoming connection request
(and then making a connection back to the actual web server where it retrieves the
page and presents it to the requesting node)
T/F: Reverse Proxy Servers increase security - Answers - True, it places a machine with
no actual data as the most exposed serve (if the reverse proxy is breached, it contains
nothing)
T/F: Reverse proxy servers can add HTTPS level security to non-HTTPS enabled web
applications - Answers - True (the requesting node makes an HTTPS connection to the
reverse proxy server which then makes a standard HTTP connection to the actual
server)
ANSWERS
Examples of Inbound Web Service Connections - Answers - protocols, addressing,
redundancy, load balancing
Examples of Outbound Web Service Connections - Answers - proxy servers
What port does HTTP use? - Answers - Port 80
HTTP is a __________ protocol - Answers - simple
TCP sessions established by HTTP - Answers - 1) "Control" session for the base HTML
data that defines the webpage
2) Multiple other sessions for the content defined on the page
What port does HTTPS use? - Answers - Port 443
T/F: HTTPS authenticates the server - Answers - true
T/F: HTTPS does not require a digital certificate - Answers - False, HTTPS requires a
cert from a trusted certificate authority to work transparently (if the cert authority is not
trusted the browser will alert the user)
T/F: Multiple sites can exist on the same web server - Answers - True, each site should
consist of a unique DNS identifier
Basic steps in Web Server Configuration: - Answers - 1) Define a default page to be
used when a request is made for the base page or a directory
2) Define sites
What does CNAME do? - Answers - CNAME points to the underlying host name of a
web server (ex: www.site.com is CNAMED at web1.site.com)
T/F: IP Based HTTP Site Identification is the most efficient - Answers - F: it is an
inefficient use of IP addresses and therefore frowned upon by ICANN b/c multiple IP
addresses are bound to the web server's external NIC
Each site has its own underlying DNS "A" record - Answers - IP Based HTTP Site
Identification
Each site has its own DNS "CNAME" record that points to the underlying hostname -
Answers - DNS Name HTTP Site Identification
, What is the preferred method of HTTP Site Identification? - Answers - DNS Name HTTP
Site Identification
(there is one IP address for the server = more efficient use of IP addresses)
How does a web server decide which page to serve in DNS Name HTTP Site
Identification? - Answers - Based on the DNS entry from the HTTP Get from the URL
Basic HTTPS site configuration - Answers - 1) Acquire and assign certificates for each
site
2)Create a redirect page to send user from http --> https://www.site.com
3)Use separate IP addresses for each site
T/F: HTTPS security is established on an IP basis rather than a name basis - Answers -
True
(this is why separate IPs are required for each site)
T/F: Simple Servers always support HTTPS - Answers - F: Simple servers often DO
NOT support HTTPS
Disadvantages of Simple Servers - Answers - 1) often added on top of existing
workstations which creates significant security issues
2) doesn't support HTTPS
3) often offer no method of authenticating
A highly available web server running in a secure environment is a
____________________________________ - Answers - Single Dedicated Server
T/F: Single Dedicated Servers support both HTTP and HTTPS - Answers - True
Where are Single Dedicated Servers typically placed? - Answers - in a DMZ
What is the reverse proxy server located in the first layer DMZ responsible for? -
Answers - Answering the incoming connection request
(and then making a connection back to the actual web server where it retrieves the
page and presents it to the requesting node)
T/F: Reverse Proxy Servers increase security - Answers - True, it places a machine with
no actual data as the most exposed serve (if the reverse proxy is breached, it contains
nothing)
T/F: Reverse proxy servers can add HTTPS level security to non-HTTPS enabled web
applications - Answers - True (the requesting node makes an HTTPS connection to the
reverse proxy server which then makes a standard HTTP connection to the actual
server)
