Lpic 2 Linux Engineer · Free Practice Question Medium
Question 17
- A Remove the SSLCACertificateFile directive and disable SSLVerifyClient.
- B Set SSLVerifyClient require to enforce client certificate authentication.
- C Enable the TLSClientCertificate module.
- D Add SSLRequire %{SSL_CLIENT_VERIFY} eq "SUCCESS" to enforce client certificates.
Reveal correct answer
Correct answer: A
A. Removing the SSLCACertificateFile directive and disabling SSLVerifyClient will effectively disable client certificate verification on the Apache web server. This change will allow the shift towards token-based authentication without requiring client certificates for authentication.
B. Setting SSLVerifyClient require will enforce client certificate authentication, which is the opposite of what is required in this scenario. This option would not disable client certificate verification as needed.
C. Enabling the TLSClientCertificate module would not disable client certificate verification on the Apache web server. This module is used to configure settings related to client certificate authentication, which is not the goal in this situation.
D. Adding SSLRequire %{SSL_CLIENT_VERIFY} eq "SUCCESS" will enforce client certificates for authentication, which is the opposite of what is needed to disable client certificate verification. This option would not align with the organization's shift towards token-based authentication.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
