nerdexam
EC-Council

312-50V12 · Question #274

Jane is working as a security professional at CyberSol Inc. She was tasked with ensuring the authentication and integrity of messages being transmitted in the corporate network. To encrypt the…

The correct answer is D. Web of trust (WOT). The question describes a security model where users manage their own public keys in a 'ring' and use asymmetric encryption for message authentication and integrity, which is characteristic of a Web of Trust model.

Submitted by deeparc· Mar 4, 2026Cryptography

Question

Jane is working as a security professional at CyberSol Inc. She was tasked with ensuring the authentication and integrity of messages being transmitted in the corporate network. To encrypt the messages, she implemented a security model in which every user in the network maintains a ring of public keys. In this model, a user needs to encrypt a message using the receiver's public key, and only the receiver can decrypt the message using their private key. What is the security model implemented by Jane to secure corporate messages?

Options

  • AZero trust network
  • BSecure Socket Layer (SSL)
  • CTransport Layer Security (TLS)
  • DWeb of trust (WOT)

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    7% (2)
  • D
    85% (23)

Why each option

The question describes a security model where users manage their own public keys in a 'ring' and use asymmetric encryption for message authentication and integrity, which is characteristic of a Web of Trust model.

AZero trust network

A Zero Trust network is a security model that requires strict identity verification for every access request, irrespective of location, rather than a public key management system or encryption method.

BSecure Socket Layer (SSL)

Secure Socket Layer (SSL) is a deprecated cryptographic protocol that primarily relies on a hierarchical Certificate Authority (CA) model for establishing trust, not a decentralized 'web of trust' where individuals manage rings of public keys.

CTransport Layer Security (TLS)

Transport Layer Security (TLS), the successor to SSL, also uses a hierarchical Certificate Authority (CA) model to authenticate servers and clients, diverging from a decentralized 'ring of public keys' approach.

DWeb of trust (WOT)Correct

The Web of Trust (WOT) model is a decentralized trust system where individuals vouch for the authenticity of other users' public keys by digitally signing them, creating a 'ring of public keys.' This model enables users to encrypt messages with the receiver's public key, ensuring only the intended receiver, possessing the corresponding private key, can decrypt and verify the message's integrity and authenticity.

Concept tested: Decentralized public key infrastructure (PKI) trust models

Source: https://datatracker.ietf.org/doc/html/rfc4880#section-3.1

Topics

#Web of Trust (WOT)#public key cryptography#message integrity#authentication

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V12 Practice