nerdexam
CompTIA

FC0-U61 · Question #530

A company is looking into ways to ensure only approved users are able to access the company website on devices. Which of the following would work BEST to achieve this goal?

The correct answer is A. Creating certificates. To ensure only approved users access a company website on their devices, creating and utilizing certificates for client authentication is the most effective method. This allows the web server to verify the identity of the connecting device or user.

Security

Question

A company is looking into ways to ensure only approved users are able to access the company website on devices. Which of the following would work BEST to achieve this goal?

Options

  • ACreating certificates
  • BDisabling the browser's cache
  • CConfiguring proxy settings
  • DInstalling antivirus extensions

How the community answered

(64 responses)
  • A
    83% (53)
  • B
    11% (7)
  • C
    2% (1)
  • D
    5% (3)

Why each option

To ensure only approved users access a company website on their devices, creating and utilizing certificates for client authentication is the most effective method. This allows the web server to verify the identity of the connecting device or user.

ACreating certificatesCorrect

Creating and deploying client certificates allows for strong authentication where the web server verifies the client's identity before granting access. This ensures that only devices or users possessing a valid and trusted certificate can access the company website, directly addressing the need for approved user access.

BDisabling the browser's cache

Disabling the browser's cache prevents local storage of website data, but it does not authenticate users or control access to the website itself.

CConfiguring proxy settings

Configuring proxy settings routes web traffic through a proxy server, which can filter content or provide anonymity, but it does not inherently authenticate users for website access.

DInstalling antivirus extensions

Installing antivirus extensions helps protect against malware and phishing, but it does not provide a mechanism to authenticate users or devices attempting to access a specific website.

Concept tested: Client certificate authentication for websites

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/design/implementing-certificate-based-authentication

Topics

#authentication#certificates#access control#website security

Community Discussion

No community discussion yet for this question.

Full FC0-U61 Practice