312-50V13 · Question #435
Jane is working as a security professional at CyberSol Inc. She was tasked with ensuring the authentication and integrity of messages being transmitted in the corporate network. To encrypt the…
The correct answer is D. Web of trust (WOT). Jane implemented a Web of Trust (WoT) model, where users manage a collection of trusted public keys for secure message authentication and encryption, relying on decentralized trust relationships.
Question
Options
- AZero trust network
- BTransport Layer Security (TLS)
- CSecure Socket Layer (SSL)
- DWeb of trust (WOT)
How the community answered
(57 responses)- A2% (1)
- B4% (2)
- C2% (1)
- D93% (53)
Why each option
Jane implemented a Web of Trust (WoT) model, where users manage a collection of trusted public keys for secure message authentication and encryption, relying on decentralized trust relationships.
A Zero Trust network focuses on never trusting, always verifying, regardless of location, which is a broader security architecture, not a specific key management or encryption model like described.
Transport Layer Security (TLS) is a cryptographic protocol for securing communication over a computer network, primarily using X.509 certificates and a hierarchical PKI, rather than a decentralized web of trust.
Secure Socket Layer (SSL) is the deprecated predecessor to TLS and also relies on a hierarchical PKI for certificate validation, not a web of trust for managing public keys.
The Web of Trust (WoT) is a decentralized model used in PGP-like systems where users mutually sign each other's public keys, forming a network of trusted individuals rather than relying on a single Certificate Authority. In this model, each user maintains a 'ring' of public keys they have verified and trust, enabling secure asymmetric encryption for message confidentiality and authentication by encrypting with the receiver's public key.
Concept tested: Cryptographic Web of Trust model
Source: https://datatracker.ietf.org/doc/html/rfc1991
Topics
Community Discussion
No community discussion yet for this question.