Certificate Quiz: Wildcard, SAN Or Self-Signed?

1. A wildcard certificate *.example.com will trigger a security warning in browsers when used for example.com.

True

False

2. When implementing a wildcard certificate, the CN should match the wildcard pattern (e.g., *.example.com).

True

False

3. A certificate signed by a trusted CA is preferred over a self-signed certificate for public-facing services because:

It provides end-user trust without manual installation

It encrypts data more securely

It covers more domains

It lasts longer before expiration

4. What is the primary limitation of a wildcard certificate for an organization with domains example.com and other.com?

It cannot cover both domains simultaneously

It is more expensive than a SAN certificate

It covers only one domain and its subdomains

It is not trusted by modern browsers

5. In Certificate Management (Security+), a self-signed certificate in the trusted root store of a client device will not trigger warnings.

True

False

6. Wildcard certificates are ideal for securing which type of infrastructure?

Multi-tenant cloud platforms

Microservices with dynamic subdomains

Stable, predictable subdomain structures

Unrelated domains across regions

7. A SAN certificate for example.com, mail.example.com, and www.example.com must include the root domain explicitly.

True

False

8. Which certificate type is best for an organization with 50+ subdomains that change frequently?

50+ individual single-domain certificates

One wildcard certificate

One SAN certificate

Self-signed certificates for each subdomain

9. A company uses a self-signed certificate for internal LDAP authentication. What is the main security concern?

Man-in-the-middle attacks on the LDAP connection

The certificate cannot encrypt data

Self-signed certificates are inherently weak

The certificate will expire immediately

10. SAN certificates can include both wildcard entries (*.example.com) and specific domains (mail.other.com).

True

False

11. A wildcard certificate with the CN *.example.com can secure which of the following domains?

Mail.example.com and secure.example.com

Example.com and sub.mail.example.com

Example.com only

Mail.sub.example.com

12. A self-signed certificate can be used in a production environment if properly managed internally.

True

False

13. Wildcard certificates with multiple levels (e.g., ..example.com) are supported by most CAs and browsers.

True

False

14. A SAN certificate lists multiple domains in which certificate field?

Common Name (CN)

Subject Alternative Name extension

Organization (O)

Country (C)

15. Which statement about self-signed certificates is true?

They are trusted by all browsers by default

They do not require a trusted CA signature

They are cheaper than CA-signed certificates

Both B and C

16. What is the primary advantage of using a SAN certificate over a wildcard certificate?

Lower cost

Covers multiple unrelated domains

Easier to renew

Better browser compatibility

17. A wildcard certificate *.example.com does NOT cover which domain?

Api.example.com

Example.com (root domain)

Test.api.example.com

Secure.example.com

18. Self-signed certificates are commonly used in which scenario?

Public-facing e-commerce websites

Internal testing and development environments

Certificate pinning in mobile apps

Production web servers

19. A company needs to secure mail.company.com, ftp.company.com, and www.company.com with one certificate. Which option is most cost-effective?

Three separate single-domain certificates

One wildcard certificate for *.company.com

One SAN certificate listing all three domains

Three self-signed certificates

20. Which certificate type requires a trusted Certificate Authority (CA) signature to avoid browser warnings?

Self-signed certificate

Wildcard certificate

SAN certificate

Both B and C

Certificate Quiz: Wildcard, SAN or Self-Signed?

1. A wildcard certificate *.example.com will trigger a security warning in browsers when used for example.com.

2.

What first name or nickname would you like us to use?

2. When implementing a wildcard certificate, the CN should match the wildcard pattern (e.g., *.example.com).

3. A certificate signed by a trusted CA is preferred over a self-signed certificate for public-facing services because:

4. What is the primary limitation of a wildcard certificate for an organization with domains example.com and other.com?

5. In Certificate Management (Security+), a self-signed certificate in the trusted root store of a client device will not trigger warnings.

6. Wildcard certificates are ideal for securing which type of infrastructure?

7. A SAN certificate for example.com, mail.example.com, and www.example.com must include the root domain explicitly.

8. Which certificate type is best for an organization with 50+ subdomains that change frequently?

9. A company uses a self-signed certificate for internal LDAP authentication. What is the main security concern?

10. SAN certificates can include both wildcard entries (*.example.com) and specific domains (mail.other.com).

11. A wildcard certificate with the CN *.example.com can secure which of the following domains?

12. A self-signed certificate can be used in a production environment if properly managed internally.

13. Wildcard certificates with multiple levels (e.g., ..example.com) are supported by most CAs and browsers.

14. A SAN certificate lists multiple domains in which certificate field?

15. Which statement about self-signed certificates is true?

16. What is the primary advantage of using a SAN certificate over a wildcard certificate?

17. A wildcard certificate *.example.com does NOT cover which domain?

18. Self-signed certificates are commonly used in which scenario?

19. A company needs to secure mail.company.com, ftp.company.com, and www.company.com with one certificate. Which option is most cost-effective?

20. Which certificate type requires a trusted Certificate Authority (CA) signature to avoid browser warnings?

Certificate Quiz: Wildcard, SAN or Self-Signed?

1. A wildcard certificate *.example.com will trigger a security warning in browsers when used for example.com.

2.

What first name or nickname would you like us to use?

2. When implementing a wildcard certificate, the CN should match the wildcard pattern (e.g., *.example.com).

3. A certificate signed by a trusted CA is preferred over a self-signed certificate for public-facing services because:

4. What is the primary limitation of a wildcard certificate for an organization with domains example.com and other.com?

5. In Certificate Management (Security+), a self-signed certificate in the trusted root store of a client device will not trigger warnings.

6. Wildcard certificates are ideal for securing which type of infrastructure?

7. A SAN certificate for example.com, mail.example.com, and www.example.com must include the root domain explicitly.

8. Which certificate type is best for an organization with 50+ subdomains that change frequently?

9. A company uses a self-signed certificate for internal LDAP authentication. What is the main security concern?

10. SAN certificates can include both wildcard entries (*.example.com) and specific domains (mail.other.com).

11. A wildcard certificate with the CN *.example.com can secure which of the following domains?

12. A self-signed certificate can be used in a production environment if properly managed internally.

13. Wildcard certificates with multiple levels (e.g., *.*.example.com) are supported by most CAs and browsers.

14. A SAN certificate lists multiple domains in which certificate field?

15. Which statement about self-signed certificates is true?

16. What is the primary advantage of using a SAN certificate over a wildcard certificate?

17. A wildcard certificate *.example.com does NOT cover which domain?

18. Self-signed certificates are commonly used in which scenario?

19. A company needs to secure mail.company.com, ftp.company.com, and www.company.com with one certificate. Which option is most cost-effective?

20. Which certificate type requires a trusted Certificate Authority (CA) signature to avoid browser warnings?

13. Wildcard certificates with multiple levels (e.g., ..example.com) are supported by most CAs and browsers.