Which authentication service type typically requires the use of client-side certificates for user authentication?

Question

Options

• ALDAP
• BRADIUS
• CRSA SecurID
• DClient Cert auth

• A
  8% (3)
• B
  3% (1)
• C
  3% (1)
• D
  86% (31)

Explanation

Client Cert auth (Option D) is correct because this authentication method is specifically built around PKI - it requires users to present a digital certificate (stored locally or on a smart card) during the TLS handshake to prove identity, with no password involved.

Why the others are wrong:

• LDAP is a directory protocol that authenticates users via username/password lookups against a directory store, not certificates.
• RADIUS is a centralized network access protocol (used for VPNs, Wi-Fi) that relies on passwords, tokens, or challenge-response - not client certificates as its core mechanism.
• RSA SecurID is a time-based one-time password (TOTP) token system - it generates rotating numeric codes, which are the opposite of certificate-based auth.

Memory tip: The name is self-describing - "Client Cert" literally means the client presents a certificate. If the answer choice has "cert" in the name, that's your certificate authentication method.

No community discussion yet for this question.