300-820 · Question #122
Which mechanism does TLS use to validate identity?
The correct answer is A. server certificate. TLS (Transport Layer Security) validates the identity of a server using its digital certificate (X.509). During the TLS handshake, the server presents a certificate signed by a trusted Certificate Authority (CA). The client verifies the certificate's signature, validity period…
Question
Which mechanism does TLS use to validate identity?
Options
- Aserver certificate
- Bshared secret
- Cusername and a password
- DIP address of the peer
How the community answered
(29 responses)- A93% (27)
- B3% (1)
- C3% (1)
Explanation
TLS (Transport Layer Security) validates the identity of a server using its digital certificate (X.509). During the TLS handshake, the server presents a certificate signed by a trusted Certificate Authority (CA). The client verifies the certificate's signature, validity period, and that the Common Name or SAN matches the expected hostname. This certificate-based mechanism proves the server's identity without shared secrets or passwords. Shared secrets are used in protocols like IKE/IPsec PSK; username/password is an application-layer authentication mechanism; IP addresses are not used for identity in TLS. Answer A is correct.
Topics
Community Discussion
No community discussion yet for this question.