nerdexam
(ISC)2

CCSP · Question #224

TLS uses ___________ to authenticate a connection and create a shared secret for the duration of the session.

The correct answer is B. X.509 certificates. TLS employs X.509 certificates to authenticate the identity of parties involved in a connection, which is a prerequisite for establishing a secure communication channel.

Submitted by lucia.co· Apr 18, 2026Cloud Data Security

Question

TLS uses ___________ to authenticate a connection and create a shared secret for the duration of the session.

Options

  • ASAML 2.0
  • BX.509 certificates
  • C802.11X
  • DThe Diffie-Hellman process

How the community answered

(15 responses)
  • A
    7% (1)
  • B
    87% (13)
  • C
    7% (1)

Why each option

TLS employs X.509 certificates to authenticate the identity of parties involved in a connection, which is a prerequisite for establishing a secure communication channel.

ASAML 2.0

SAML 2.0 is an XML-based standard for exchanging authentication and authorization data between security domains, primarily used for web browser single sign-on, not directly for authenticating a TLS connection itself.

BX.509 certificatesCorrect

X.509 certificates are a public key infrastructure (PKI) standard used by TLS during the handshake to verify the identity of the server and, optionally, the client. These digital certificates bind a public key to an authenticated identity, allowing participants to trust the authenticity of their communication peer before encrypting data.

C802.11X

802.11X is an IEEE standard for port-based network access control, often used for authenticating devices to a wireless or wired network, not for the cryptographic authentication within the TLS protocol.

DThe Diffie-Hellman process

The Diffie-Hellman process is a key exchange algorithm used within TLS to establish a shared secret securely, but it does not perform the authentication of the parties; X.509 certificates provide the authentication for this key exchange.

Concept tested: TLS authentication mechanisms (X.509 certificates)

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/understanding-x-509-public-key-certificates

Topics

#TLS#X.509 certificates#Authentication#Cryptography

Community Discussion

No community discussion yet for this question.

Full CCSP Practice