nerdexam
CompTIA

SY0-301 · Question #12

Certificates are used for: (Select TWO).

The correct answer is A. Client authentication. D. Code signing. Digital certificates, issued by a Certificate Authority (CA), bind a public key to an identity and serve two key purposes here: (A) Client authentication - certificates can verify the identity of a client to a server (e.g., mutual TLS), proving who the client is without…

General security concepts

Question

Certificates are used for: (Select TWO).

Options

  • AClient authentication.
  • BWEP encryption.
  • CAccess control lists.
  • DCode signing.
  • EPassword hashing.

How the community answered

(36 responses)
  • A
    92% (33)
  • B
    6% (2)
  • C
    3% (1)

Explanation

Digital certificates, issued by a Certificate Authority (CA), bind a public key to an identity and serve two key purposes here: (A) Client authentication - certificates can verify the identity of a client to a server (e.g., mutual TLS), proving who the client is without passwords; and (D) Code signing - developers use certificates to digitally sign software, allowing users and operating systems to verify that code hasn't been tampered with and comes from a trusted source. WEP encryption (B) uses pre-shared keys, not certificates. Access control lists (C) are IP/rule-based, unrelated to PKI certificates. Password hashing (E) is a one-way function for storing passwords, not a certificate function.

Topics

#digital certificates#client authentication#code signing#PKI

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice