99
Views
4
Comments
Security Specialist Question related to SSL

what is the correct event order ?

  • The certificate is generated at the Web browser.
  • A digital certificate is established between web server
  • SSL is generated between the client and browser.
  • Bank transaction was completed.

Also it there any dumps are available for Security Specialist Certification ?

2025-01-23 09-22-22
ABHIJITH G
Champion

Hi Navneet Garg,
I just did a research regarding the question and as per my understanding the order is as below;

1. A digital certificate is established between the web server.

2. SSL is generated between the client and browser.

3. The certificate is generated at the web browser.

4. The bank transaction was completed.

Thanks

2024-12-18 16-06-42
Junaid Syed

Hello Navneet,

I feel the question events are not worded properly, for instance as far as I understand certificate is generated on/by server not client. Regardless below is the usual flow of information between client and server to establish SSL communication. I hope this will help you figure out the correct order.

  1. The client sends a request to the server for a secure session. The server responds by sending its digital certificate to the client.
  2. The client receives the server's digital certificate.
  3. The client authenticates the server, using a list of known certificate authorities.
  4. The client generates a random symmetric key and encrypts it using server's public key.
  5. The client and server now both know the symmetric key and can use the SSL encryption process to encrypt and decrypt the information contained in the client request and the server response.

Thanks,

Junaid

2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP

Hi Navneet,

I must kindly inform you that sharing or using exam dumps is against OutSystems' certification policies and ethical guidelines. These policies are in place to ensure the certification process remains fair and credible for everyone involved.  

I strongly encourage you to prepare for the exam by using the official resources provided by OutSystems, such as the training materials, documentation, and practice assessments available on their platform. The Exam Details cover everything you need to learn. Doing a certification is to validate that you understand the learning material, not that you practices every possible exam questions.

Regards,

Daniel

2022-12-30 07-28-09
Navneet Garg

Yes, I understand and agree with you as well but security is something that is very difficult to try and practice in the real world, especially with a personal environment.

Also the same set of the exam is very small for such a big topic.

I totally understand the concern and in the previous exam I never used the dumps but I just found this question and thought that it is not a typical ssl handshake and the language of the question is also very confusing.

I checked all the documents and training path for security and no topic available which explains this scenario. 


Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.