200-901 Network Fundamentals Practice Question
An engineer is troubleshooting a network issue where a client cannot reach a server. The client uses HTTPS. Which TWO factors are essential for a successful TLS handshake?
⚠ Common exam trap
Cisco often tests the misconception that the client must always present a certificate or that the handshake uses UDP, when in reality client certificates are optional and TLS relies on TCP.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The server must have a valid digital certificate
The server must present a valid digital certificate during the TLS handshake to prove its identity to the client. This certificate contains the server's public key and is signed by a trusted Certificate Authority (CA), enabling the client to verify the server's authenticity before proceeding with encrypted communication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The server must have a valid digital certificate
Why this is correct
The certificate proves the server's identity.
- ✗
The handshake uses UDP for faster negotiation
Why it's wrong here
TLS typically runs over TCP.
- ✗
The client must present a certificate to the server
Why it's wrong here
Client certificates are optional, not required for a basic TLS handshake.
- ✗
The client must have a public key to encrypt the session
Why it's wrong here
The client uses the server's public key (from certificate) to encrypt the pre-master secret.
- ✓
The server's private key is used to decrypt the pre-master secret
Why this is correct
Only the server's private key can decrypt the pre-master secret.
Go deeper
Related to this question
About these practice questions
One of 989 original 200-901 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.