CCSP · Question #224
TLS uses ___________ to authenticate a connection and create a shared secret for the duration of the session.
The correct answer is B. X.509 certificates. TLS employs X.509 certificates to authenticate the identity of parties involved in a connection, which is a prerequisite for establishing a secure communication channel.
Question
TLS uses ___________ to authenticate a connection and create a shared secret for the duration of the session.
Options
- ASAML 2.0
- BX.509 certificates
- C802.11X
- DThe Diffie-Hellman process
How the community answered
(15 responses)- A7% (1)
- B87% (13)
- C7% (1)
Why each option
TLS employs X.509 certificates to authenticate the identity of parties involved in a connection, which is a prerequisite for establishing a secure communication channel.
SAML 2.0 is an XML-based standard for exchanging authentication and authorization data between security domains, primarily used for web browser single sign-on, not directly for authenticating a TLS connection itself.
X.509 certificates are a public key infrastructure (PKI) standard used by TLS during the handshake to verify the identity of the server and, optionally, the client. These digital certificates bind a public key to an authenticated identity, allowing participants to trust the authenticity of their communication peer before encrypting data.
802.11X is an IEEE standard for port-based network access control, often used for authenticating devices to a wireless or wired network, not for the cryptographic authentication within the TLS protocol.
The Diffie-Hellman process is a key exchange algorithm used within TLS to establish a shared secret securely, but it does not perform the authentication of the parties; X.509 certificates provide the authentication for this key exchange.
Concept tested: TLS authentication mechanisms (X.509 certificates)
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/understanding-x-509-public-key-certificates
Topics
Community Discussion
No community discussion yet for this question.