nerdexam
CompTIA

LX0-104 · Question #415

Which of the following parameters should be set in main.cf to enable TLS in Postfix?

The correct answer is A. smtpd_tls_cert_file, smtpd_tls_key_file, smtpd_tls_CAfile, smtpd_use_tls. To enable TLS in Postfix for the SMTP daemon, the essential parameters to configure in main.cf are smtpd_tls_cert_file for the server certificate, smtpd_tls_key_file for the private key, smtpd_tls_CAfile for trusted CA certificates, and smtpd_use_tls to activate TLS.

Security

Question

Which of the following parameters should be set in main.cf to enable TLS in Postfix?

Options

  • Asmtpd_tls_cert_file, smtpd_tls_key_file, smtpd_tls_CAfile, smtpd_use_tls
  • Bsmtpd_tls_key_file, smtpd_tls_CAfile, smtpd_use_tls, smtpd_tls_pem_file
  • Csmtpd_tls_CAfile, smtpd_use_tls, smtpd_tls_pem_file, smtpd_tls_cert_file
  • Dsmtpd_use_tls, smtpd_tls_pem_file, smtpd_tls_cert_file, smtpd_tls_key_file

How the community answered

(42 responses)
  • A
    93% (39)
  • B
    5% (2)
  • C
    2% (1)

Why each option

To enable TLS in Postfix for the SMTP daemon, the essential parameters to configure in `main.cf` are `smtpd_tls_cert_file` for the server certificate, `smtpd_tls_key_file` for the private key, `smtpd_tls_CAfile` for trusted CA certificates, and `smtpd_use_tls` to activate TLS.

Asmtpd_tls_cert_file, smtpd_tls_key_file, smtpd_tls_CAfile, smtpd_use_tlsCorrect

Enabling TLS in Postfix requires `smtpd_tls_cert_file` to specify the path to the server's public certificate, `smtpd_tls_key_file` for the corresponding private key, `smtpd_tls_CAfile` for the file containing trusted Certificate Authority certificates, and `smtpd_use_tls` to explicitly turn on TLS support for incoming SMTP connections.

Bsmtpd_tls_key_file, smtpd_tls_CAfile, smtpd_use_tls, smtpd_tls_pem_file

The `smtpd_tls_pem_file` parameter is not a standard or required setting for basic TLS configuration; it is typically covered by `smtpd_tls_cert_file` and `smtpd_tls_key_file`.

Csmtpd_tls_CAfile, smtpd_use_tls, smtpd_tls_pem_file, smtpd_tls_cert_file

The `smtpd_tls_pem_file` parameter is not a standard or required setting for basic TLS configuration; it is typically covered by `smtpd_tls_cert_file` and `smtpd_tls_key_file`.

Dsmtpd_use_tls, smtpd_tls_pem_file, smtpd_tls_cert_file, smtpd_tls_key_file

The `smtpd_tls_pem_file` parameter is not a standard or required setting for basic TLS configuration; it is typically covered by `smtpd_tls_cert_file` and `smtpd_tls_key_file`.

Concept tested: Postfix TLS configuration parameters

Source: http://www.postfix.org/postconf.5.html#smtpd_use_tls

Topics

#Postfix#TLS#mail server#encryption

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice