{"department":null,"description":null,"descriptionStatus":null,"descriptionUpdatedAt":null,"id":"b0b72045-5036-4382-b5e2-6f7cc499bfd3","label":"Apache","shortDescription":null,"slug":"apache","updatedAt":"2026-03-19T08:13:48.995Z","quizzes":[{"difficulty":"advanced","id":"dSzhIlk6OT","questionCount":15,"questions":[{"index":0,"options":["The connection socket is moved to a poll set monitored by the listener thread, freeing the worker thread to serve other requests","The connection data is serialized to shared memory, and the worker thread is released until new data arrives","The connection is migrated to a separate KeepAlive process that handles all idle connections","A dedicated worker thread remains assigned to the connection until the next request arrives or the KeepAlive timeout expires"],"question":"In MPM Event, how does the server handle a KeepAlive connection that is waiting for the next request from the client?","difficulty":"advanced","explanation":"In MPM Event, after completing a request, the connection is moved from the worker thread to a poll set monitored by the listener/event thread. The worker thread is freed to handle other requests, and only when new data arrives is a worker thread reassigned.","correctIndex":0},{"index":1,"options":["[L] applies the rule only to the last segment of the URL path, while [END] applies it to the entire path","[L] stops processing of the current .htaccess file but allows reprocessing from the top after an internal redirect, while [END] stops all rewrite processing entirely including after internal redirects","[L] requires mod_rewrite to be loaded, while [END] is a built-in Apache core directive","[L] is case-sensitive in pattern matching, while [END] is case-insensitive"],"question":"In an .htaccess file, what is the key behavioral difference between using the [L] flag versus the [END] flag in a RewriteRule?","difficulty":"advanced","explanation":"In .htaccess context, [L] only stops the current pass through the rules. If a rewrite occurs, the new URL is reprocessed from the top of the ruleset (which can cause loops). [END] stops all rewrite processing entirely, preventing reprocessing after an internal redirect.","correctIndex":1},{"index":2,"options":["The last VirtualHost defined for that IP:port","The VirtualHost with the alphabetically first ServerName","Apache returns a 404 Not Found error","The first VirtualHost defined for that IP:port"],"question":"When Apache receives a request on an IP:port that has multiple name-based VirtualHosts defined, but the request's Host header doesn't match any ServerName or ServerAlias, which VirtualHost handles the request?","difficulty":"advanced","explanation":"The first VirtualHost defined for a given IP:port combination becomes the default for that address. Any request with an unrecognized Host header is served by this first VirtualHost, which is a common source of unintended content serving.","correctIndex":3},{"index":3,"options":["Apache must scan every directory from the DocumentRoot to the requested file's directory for .htaccess files and parse them on each request","It prevents Apache from using KeepAlive connections, increasing connection overhead","It forces Apache to disable kernel-level sendfile() for static content delivery","It enables additional Apache modules that consume more memory per process"],"question":"What is the primary performance impact of using `AllowOverride All` instead of `AllowOverride None` in a Directory block?","difficulty":"advanced","explanation":"When AllowOverride is enabled, Apache must check for and parse .htaccess files in every directory from the document root to the requested file's directory on every request. This results in additional filesystem stat() calls and file parsing on each request, even if no .htaccess files exist.","correctIndex":0},{"index":4,"options":["It rewrites Location, Content-Location, and URI headers in HTTP redirect responses from the backend to use the proxy server's URL instead of the backend's internal URL","It reverses the proxy direction, allowing the backend server to initiate connections to the frontend","It configures bidirectional proxying for WebSocket connections","It reverses the order of ProxyPass directives for load balancing priority"],"question":"What is the primary purpose of the ProxyPassReverse directive when configuring Apache as a reverse proxy?","difficulty":"advanced","explanation":"ProxyPassReverse rewrites HTTP redirect responses (3xx status codes) from the backend, replacing the backend's internal hostname/port/path with the proxy server's external URL. This prevents clients from being redirected to internal backend URLs they cannot reach directly.","correctIndex":0},{"index":5,"options":["SSLCipherSuite HIGH:!aNULL:!MD5","SSLCipherSuite RSA+AES256+SHA256","SSLCipherSuite AES256+SHA384","SSLCipherSuite ECDHE+AESGCM:DHE+AESGCM:!aNULL:!MD5"],"question":"Which SSLCipherSuite configuration ensures that Perfect Forward Secrecy (PFS) is enforced for all connections?","difficulty":"advanced","explanation":"Perfect forward secrecy requires ephemeral key exchange (ECDHE or DHE). Only cipher suites using ECDHE or DHE key exchange generate a new session key for each handshake, ensuring that compromising the server's private key doesn't compromise past session keys.","correctIndex":3},{"index":6,"options":["1024","64","128","2048"],"question":"In MPM Worker with ServerLimit=16, ThreadLimit=128, and ThreadsPerChild=64, what is the maximum effective MaxRequestWorkers value?","difficulty":"advanced","explanation":"MaxRequestWorkers equals ServerLimit × ThreadsPerChild = 16 × 64 = 1024. ThreadLimit (128) sets the compile-time ceiling for ThreadsPerChild, but the actual ThreadsPerChild value (64) determines the total concurrent request capacity.","correctIndex":0},{"index":7,"options":["MPM Event disables KeepAlive by default, forcing clients to create new connections that are processed more efficiently","MPM Event uses asynchronous I/O for all request processing, eliminating the need for threads entirely","MPM Event uses a separate process for each KeepAlive connection, preventing thread starvation","MPM Event moves KeepAlive connections to an event thread for monitoring, freeing worker threads to handle new requests instead of idling while waiting"],"question":"What is the primary advantage of MPM Event over MPM Worker for servers handling high volumes of KeepAlive connections?","difficulty":"advanced","explanation":"MPM Event's key advantage is separating connection monitoring from request processing. KeepAlive connections waiting for the next request are monitored by the event/listener thread, not by worker threads. This frees worker threads to serve other requests instead of idling during KeepAlive timeouts.","correctIndex":3},{"index":8,"options":["The certificate from the first SSL VirtualHost defined for that IP:port","Apache returns a TLS handshake failure and closes the connection","Apache presents a generic self-signed certificate generated at startup","The certificate from the VirtualHost with the most specific ServerName match"],"question":"When a client without Server Name Indication (SNI) support connects to an Apache server with multiple SSL VirtualHosts on the same IP:port, which certificate is presented?","difficulty":"advanced","explanation":"Without SNI, Apache cannot determine which hostname the client is requesting during the TLS handshake. It uses the first VirtualHost defined for that IP:port as the default and presents its certificate, which is why the first SSL VirtualHost on a given IP:port is architecturally significant.","correctIndex":0},{"index":9,"options":["It prevents cache stampede (thundering herd) by locking a URL while the first request is being fetched from the backend, causing subsequent requests to wait","It enforces exclusive read access to cached content, preventing stale reads during cache updates","It prevents cache corruption from concurrent writes by multiple worker processes","It prevents denial-of-service attacks by limiting the number of concurrent cache operations"],"question":"What problem does the CacheLock directive in mod_cache solve?","difficulty":"advanced","explanation":"CacheLock addresses the 'thundering herd' or 'cache stampede' problem. When a cached resource expires and multiple concurrent requests arrive for it, CacheLock ensures only the first request fetches from the backend while subsequent requests wait, preventing the backend from being overwhelmed.","correctIndex":0},{"index":10,"options":["The first capture group from the RewriteRule's pattern","The first environment variable defined by SetEnvIf","The first capture group from the last matched RewriteCond","The first query string parameter in the request"],"question":"In a RewriteRule with a preceding RewriteCond, what does the %1 backreference refer to?","difficulty":"advanced","explanation":"In mod_rewrite, %N refers to backreferences from the last matched RewriteCond, while $N refers to backreferences from the RewriteRule's own pattern. This allows RewriteCond captures to be used in the RewriteRule's substitution string.","correctIndex":2},{"index":11,"options":["`` supports regular expressions for matching HTTP methods, while `` does not","`` only restricts GET and POST methods, leaving other methods like PUT, DELETE, and PATCH unrestricted, while `` restricts all methods except GET and POST","`` applies restrictions to both HTTP and HTTPS, while `` only applies to HTTP","`` is processed earlier in the request handling pipeline, preventing bypass of security checks"],"question":"What is the security advantage of using `` over `` to restrict access?","difficulty":"advanced","explanation":"`` applies authorization directives only to GET and POST methods, meaning other HTTP methods (PUT, DELETE, PATCH, etc.) bypass these restrictions entirely. `` applies restrictions to all methods except GET and POST, providing comprehensive security coverage against unexpected HTTP methods.","correctIndex":1},{"index":12,"options":["It ensures all response data is flushed to the client before closing the TCP connection, preventing the client from receiving a connection reset","It maintains SSL session data in memory for session resumption on future connections","It keeps worker threads alive after serving a request to reduce thread creation overhead for subsequent requests","It delays closing KeepAlive connections to allow HTTP pipelined requests to arrive"],"question":"What is the purpose of the 'lingering close' mechanism in Apache?","difficulty":"advanced","explanation":"Lingering close ensures that any remaining data in the TCP send buffer is transmitted to the client before the connection is closed. Without it, Apache might close the connection while data is still in transit, causing a TCP RST that prevents the client from receiving the complete response.","correctIndex":0},{"index":13,"options":["Denial of service through recursive TRACE requests","Man-in-the-middle attacks that use TRACE to intercept encrypted traffic","Cross-Site Tracing (XST), which could allow an attacker to steal HTTP-only cookies by combining the TRACE method with Cross-Site Scripting","Information disclosure through stack traces in error pages"],"question":"What security vulnerability does `TraceEnable Off` mitigate?","difficulty":"advanced","explanation":"The TRACE method echoes the entire HTTP request back to the client. Combined with XSS, an attacker could use TRACE to access HTTP-only cookies (which are included in the request headers echoed back), bypassing the HttpOnly cookie flag. Disabling TRACE prevents this Cross-Site Tracing (XST) attack vector.","correctIndex":2},{"index":14,"options":["Apache returns a configuration syntax error","Only the first Require directive is evaluated, and others are ignored","All Require directives must be satisfied (implicit AND logic)","Any single Require directive must be satisfied (implicit OR logic)"],"question":"In Apache 2.4, when multiple bare `` directives are used in a `` block without being wrapped in ``, ``, or ``, what is the default authorization logic?","difficulty":"advanced","explanation":"By default, bare Require directives are implicitly contained within a `` container, meaning authorization is granted if ANY of the specified conditions are met. To require all conditions to be met (AND logic), you must explicitly use ``.","correctIndex":3}]},{"difficulty":"intermediate","id":"gT80RzG86n","questionCount":15,"questions":[{"index":0,"options":["Allows symbolic links to be followed without Owner match","Allows .htaccess files to override all directive categories","Allows all IP addresses to access the directory","Allows all HTTP methods (GET, POST, PUT, DELETE, etc.)"],"question":"What does the AllowOverride All directive enable in an Apache configuration?","difficulty":"intermediate","explanation":"AllowOverride controls which directives in .htaccess files can override server configuration. 'All' enables .htaccess to override all directive categories permitted in that context.","correctIndex":1},{"index":1,"options":["The rule logs the rewrite to the error log","The rule is case-insensitive","The rule is the last rule to be processed if it matches","The rule applies only to local requests"],"question":"In a RewriteRule, what does the [L] flag indicate?","difficulty":"intermediate","explanation":"The [L] (Last) flag tells mod_rewrite to stop processing further rules if the current rule matches, preventing additional rewrite rules from being applied.","correctIndex":2},{"index":2,"options":["mpm_prefork","mpm_worker","mpm_event","mpm_netware"],"question":"Which Apache MPM (Multi-Processing Module) uses a single control process that spawns child processes, each handling one connection at a time?","difficulty":"intermediate","explanation":"mpm_prefork creates multiple child processes, each with a single thread handling one connection at a time, making it suitable for use with non-thread-safe modules like mod_php.","correctIndex":0},{"index":3,"options":["They cannot be used in the same virtual host","ProxyPass always takes precedence","Whichever appears first in the configuration file","RewriteRule [P] always takes precedence"],"question":"When configuring a reverse proxy with ProxyPass, which directive takes precedence if both ProxyPass and RewriteRule [P] are used for the same path?","difficulty":"intermediate","explanation":"ProxyPass directives are processed before RewriteRules in the request handling pipeline, so ProxyPass will take precedence regardless of configuration order.","correctIndex":1},{"index":4,"options":["Sets the server to production mode, limiting resource usage","Prevents the server from processing .htaccess files","Suppresses version and module information in server response headers","Disables server-side includes entirely"],"question":"What is the effect of setting ServerTokens Prod in the Apache configuration?","difficulty":"intermediate","explanation":"ServerTokens Prod configures Apache to send only 'Server: Apache' in HTTP response headers, hiding version numbers and loaded module information to reduce information disclosure.","correctIndex":2},{"index":5,"options":["Grant from all","Require all granted","Authorize all","Permit all access"],"question":"In Apache 2.4, which directive replaces the older Order allow,deny and Allow from all syntax?","difficulty":"intermediate","explanation":"Apache 2.4 introduced the mod_authz_core module with the Require directive. 'Require all granted' replaces the older 'Order allow,deny' and 'Allow from all' combination.","correctIndex":1},{"index":6,"options":["It sets the base hostname for all rewrite conditions","It defines the base directory for Apache to search for modules","It sets the base URL prefix for subsequent RewriteRule substitutions","It restricts rewrite rules to only apply within the specified directory"],"question":"What is the purpose of the RewriteBase directive in an .htaccess file?","difficulty":"intermediate","explanation":"RewriteBase sets the base URL path that is prepended to relative substitutions in RewriteRule directives, which is essential when using mod_rewrite in per-directory context (.htaccess).","correctIndex":2},{"index":7,"options":["DefaultVirtualHost","ServerAlias _default_","The first VirtualHost defined for that IP/port","VirtualHostPriority"],"question":"When configuring name-based virtual hosts, what directive determines which virtual host handles a request when no ServerName or ServerAlias matches?","difficulty":"intermediate","explanation":"When no ServerName or ServerAlias matches the request's Host header, Apache routes the request to the first VirtualHost defined for that address/port combination, making it the default.","correctIndex":2},{"index":8,"options":["mod_zip","mod_deflate","mod_compress","mod_gzip"],"question":"Which module provides output compression (gzip) in Apache 2.x?","difficulty":"intermediate","explanation":"mod_deflate is the standard Apache 2.x module for compressing output before sending it to the client. mod_gzip was used in Apache 1.x but is not part of the standard Apache 2 distribution.","correctIndex":1},{"index":9,"options":["It prevents the redirect from being overridden by .htaccess","It sends a 301 status code instead of a 302 status code","It creates a permanent entry in the server's routing table","It redirects to a permanent storage location on the server"],"question":"What does the RedirectPermanent directive do compared to Redirect?","difficulty":"intermediate","explanation":"RedirectPermanent sends an HTTP 301 (Moved Permanently) status code, while Redirect sends a 302 (Found/temporary) status code. 301 tells browsers and search engines the redirect is permanent.","correctIndex":1},{"index":10,"options":["The domain name of the requesting client","The time taken to serve the request in microseconds","The date of the request in DD/MM/YYYY format","The directory path of the requested resource"],"question":"In a CustomLog directive, what does the %D format string record?","difficulty":"intermediate","explanation":"The %D format string in CustomLog records the time taken to serve the request in microseconds, which is useful for performance monitoring and identifying slow responses.","correctIndex":1},{"index":11,"options":["AuthType Basic\nAuthName \"Restricted\"\nAuthUserFile /etc/apache2/.htpasswd\nAllow from authenticated","AuthType Basic\nAuthName \"Restricted\"\nAuthUserFile /etc/apache2/.htpasswd\nRequire valid-user","AuthType Basic\nAuthName \"Restricted\"\nAuthUserFile /etc/apache2/.htpasswd\nAccept valid-user","AuthType Basic\nAuthName \"Restricted\"\nAuthUserFile /etc/apache2/.htpasswd\nGrant access valid-user"],"question":"What is the correct syntax for requiring HTTP Basic authentication for a directory in Apache 2.4?","difficulty":"intermediate","explanation":"In Apache 2.4, the correct syntax uses 'Require valid-user' after specifying AuthType, AuthName, and AuthUserFile. This replaces the older 'Require valid-user' combined with 'Satisfy all' pattern.","correctIndex":1},{"index":12,"options":["It appends the original query string to the rewritten URL","It disables query string handling entirely","It requires SSL for the rewritten request","It quotes special characters in the substitution string"],"question":"What happens when you use the [QSA] flag in a RewriteRule?","difficulty":"intermediate","explanation":"The [QSA] (Query String Append) flag appends the original request's query string to any query string created by the RewriteRule substitution, preserving existing query parameters.","correctIndex":0},{"index":13,"options":["MaxClients","MaxRequestWorkers","MaxConnections","ServerLimit"],"question":"Which directive specifies the maximum number of simultaneous connections that Apache will process at one time in the prefork MPM?","difficulty":"intermediate","explanation":"In Apache 2.2 and earlier, MaxClients sets the maximum number of simultaneous connections. In Apache 2.4, this was renamed to MaxRequestWorkers, but MaxClients remains as an alias for backward compatibility.","correctIndex":0},{"index":14,"options":["It encloses directives that should only be processed if the specified module is loaded","It forces Apache to load the specified module before processing enclosed directives","It conditionally loads a module only if it is not already loaded","It disables the specified module for the enclosed directives only"],"question":"What is the purpose of the directive in Apache configuration?","difficulty":"intermediate","explanation":"The directive encloses configuration directives that should only be processed if a particular module is loaded, allowing configurations to work whether or not optional modules are available.","correctIndex":0}]},{"difficulty":"beginner","id":"udoeVc9bIs","questionCount":15,"questions":[{"index":0,"options":["Serving web pages and handling HTTP requests","File system organization and storage","Database management and SQL processing","Managing email services and protocols"],"question":"What is the Apache HTTP Server primarily used for?","difficulty":"beginner","explanation":"Apache HTTP Server is a web server software designed to serve web pages and handle incoming HTTP requests from clients.","correctIndex":0},{"index":1,"options":["server.cfg","apache.conf","web.config","httpd.conf"],"question":"What is the main configuration file for Apache HTTP Server on many Linux distributions?","difficulty":"beginner","explanation":"httpd.conf is the primary configuration file for Apache, though some distributions like Debian/Ubuntu use apache2.conf instead.","correctIndex":3},{"index":2,"options":["8080","3000","80","443"],"question":"What is the default port Apache listens on for unencrypted HTTP traffic?","difficulty":"beginner","explanation":"Port 80 is the well-known default port for unencrypted HTTP traffic, and Apache listens on this port by default.","correctIndex":2},{"index":3,"options":["serverctl","apachectl","apache-ctl","httpd-ctrl"],"question":"Which command is commonly used to control the Apache HTTP Server on Linux systems?","difficulty":"beginner","explanation":"apachectl is the standard control interface for Apache, used to start, stop, and restart the server.","correctIndex":1},{"index":4,"options":["The directory where Apache logs are stored","The directory where Apache is installed","The directory containing Apache configuration files","The root directory of the website's files served to clients"],"question":"What does the DocumentRoot directive specify in Apache configuration?","difficulty":"beginner","explanation":"The DocumentRoot directive defines the directory from which Apache serves files to clients, typically containing the website's HTML and assets.","correctIndex":3},{"index":5,"options":["A virtual machine running Apache","A cloud-based Apache instance","A backup server configuration","A method to host multiple websites on a single server"],"question":"What is a Virtual Host in Apache?","difficulty":"beginner","explanation":"Virtual Hosts allow a single Apache server to serve multiple websites, each with its own domain name and configuration.","correctIndex":3},{"index":6,"options":["22","8080","443","80"],"question":"What is the default port for HTTPS (secure HTTP) traffic?","difficulty":"beginner","explanation":"Port 443 is the standard port for HTTPS traffic, which uses SSL/TLS encryption for secure communication.","correctIndex":2},{"index":7,"options":["To define Apache modules to load","To store website HTML content","To store user passwords for authentication","To provide directory-level configuration overrides"],"question":"What is the purpose of an .htaccess file in Apache?","difficulty":"beginner","explanation":"The .htaccess file allows directory-level configuration changes, such as URL rewriting, access control, and custom error pages, without modifying the main server config.","correctIndex":3},{"index":8,"options":["/var/www/logs/","/etc/apache/logs/","/tmp/apache/logs/","/var/log/apache2/"],"question":"Where does Apache typically store its log files on a Linux system?","difficulty":"beginner","explanation":"On most Linux distributions, Apache stores log files in /var/log/apache2/ (Debian/Ubuntu) or /var/log/httpd/ (RHEL/CentOS).","correctIndex":3},{"index":9,"options":["The directory Apache should serve files from","The IP addresses and ports Apache should listen on for incoming requests","The maximum number of concurrent connections Apache should accept","The modules Apache should load at startup"],"question":"What does the Listen directive in Apache configuration specify?","difficulty":"beginner","explanation":"The Listen directive tells Apache which IP addresses and port numbers to bind to for receiving incoming requests.","correctIndex":1},{"index":10,"options":["Maximum Process Manager","Multi-Processing Module","Memory Protection Mechanism","Main Process Monitor"],"question":"What does MPM stand for in the context of Apache?","difficulty":"beginner","explanation":"MPM stands for Multi-Processing Module, which determines how Apache handles multiple concurrent requests and manages processes or threads.","correctIndex":1},{"index":11,"options":["To specify the website's root directory path","To define the server's IP address for network routing","To set the administrator's email address","To specify the server's hostname and port that the server uses to identify itself"],"question":"What is the purpose of the ServerName directive?","difficulty":"beginner","explanation":"The ServerName directive sets the hostname and port that Apache uses to identify itself, which is important for virtual hosting and redirect URLs.","correctIndex":3},{"index":12,"options":["mod_tls","mod_ssl","mod_https","mod_secure"],"question":"Which Apache module is required to enable HTTPS/SSL support?","difficulty":"beginner","explanation":"mod_ssl is the Apache module that provides SSL/TLS encryption support, enabling the server to serve content over HTTPS.","correctIndex":1},{"index":13,"options":["Lists all directories available on the server","Deletes a directory from the server's file system","Creates a new directory on the server's file system","Applies configuration rules to a specific directory and its subdirectories"],"question":"What does the directive in Apache configuration do?","difficulty":"beginner","explanation":"The directive wraps configuration rules that apply to a specific directory and all its subdirectories, controlling access and behavior.","correctIndex":3},{"index":14,"options":["apache2 --restart","reboot apache2","systemctl restart apache2","service restart apache"],"question":"Which of the following is a common way to restart Apache on a modern Debian/Ubuntu system?","difficulty":"beginner","explanation":"On modern Debian/Ubuntu systems using systemd, 'systemctl restart apache2' is the standard command to restart the Apache service.","correctIndex":2}]}]}

Apache Quiz

Pick your level

Beginner

Intermediate

Advanced