nerdexam
Cisco

300-820 · Question #122

Which mechanism does TLS use to validate identity?

The correct answer is A. server certificate. TLS (Transport Layer Security) validates the identity of a server using its digital certificate (X.509). During the TLS handshake, the server presents a certificate signed by a trusted Certificate Authority (CA). The client verifies the certificate's signature, validity period…

Cisco Expressway for Collaboration

Question

Which mechanism does TLS use to validate identity?

Options

  • Aserver certificate
  • Bshared secret
  • Cusername and a password
  • DIP address of the peer

How the community answered

(29 responses)
  • A
    93% (27)
  • B
    3% (1)
  • C
    3% (1)

Explanation

TLS (Transport Layer Security) validates the identity of a server using its digital certificate (X.509). During the TLS handshake, the server presents a certificate signed by a trusted Certificate Authority (CA). The client verifies the certificate's signature, validity period, and that the Common Name or SAN matches the expected hostname. This certificate-based mechanism proves the server's identity without shared secrets or passwords. Shared secrets are used in protocols like IKE/IPsec PSK; username/password is an application-layer authentication mechanism; IP addresses are not used for identity in TLS. Answer A is correct.

Topics

#TLS#Certificates#Identity Validation#Security Protocols

Community Discussion

No community discussion yet for this question.

Full 300-820 Practice