Hosting Web Hosting Security

Question 1

What is an SSL/TLS certificate and why is it essential for US hosting customers?

Accepted Answer

A cryptographic certificate that encrypts data between visitor browsers and the server, required for HTTPS and trusted by Google

Answer

An SSL/TLS certificate enables HTTPS by encrypting data transmitted between a visitor's browser and the web server, protecting sensitive data and required by Google as a ranking signal.

Question 2

What does 'Let's Encrypt' provide to web hosting customers?

Accepted Answer

Free automated SSL/TLS certificates trusted by all major browsers

Answer

Let's Encrypt is a free, automated, and open certificate authority that provides trusted SSL/TLS certificates at no cost, making HTTPS accessible to all website owners.

Question 3

What is a 'brute force attack' in the context of web hosting security?

Accepted Answer

Automated attempts to guess passwords or encryption keys by systematically trying many combinations

Answer

A brute force attack uses automated tools to systematically try large numbers of password or key combinations until the correct one is found, targeting SSH, FTP, and admin panels.

Question 4

What does a WAF (Web Application Firewall) protect against in hosting?

Accepted Answer

Application-layer attacks such as SQL injection, XSS, and CSRF targeting web applications

Answer

A WAF (Web Application Firewall) inspects HTTP/HTTPS traffic and blocks application-layer attacks including SQL injection, cross-site scripting (XSS), and other OWASP Top 10 threats.

Question 5

What is 'two-factor authentication' (2FA) and why should hosting customers use it?

Accepted Answer

A security method requiring a second verification step (like a one-time code) in addition to a password to access hosting accounts

Answer

2FA requires users to verify identity with a second factor (such as a time-based one-time code from an app) in addition to their password, dramatically reducing account takeover risk.

Hosting Practice Test

Hosting Practice Test

Hosting Web Hosting Security