SY0-301 · Question #622
In order to use a two-way trust model the security administrator MUST implement which of the following?
The correct answer is B. PKI. A two-way (mutual) trust model requires both parties to authenticate each other, which depends on a Public Key Infrastructure to issue and validate digital certificates.
Question
In order to use a two-way trust model the security administrator MUST implement which of the following?
Options
- ADAC
- BPKI
- CHTTPS
- DTPM
How the community answered
(44 responses)- A7% (3)
- B86% (38)
- C2% (1)
- D5% (2)
Why each option
A two-way (mutual) trust model requires both parties to authenticate each other, which depends on a Public Key Infrastructure to issue and validate digital certificates.
DAC (Discretionary Access Control) governs resource permissions based on owner-defined rules and is unrelated to establishing mutual trust between parties.
PKI provides the certificate authority hierarchy and digital certificates required for mutual authentication. In a two-way trust, each party presents a certificate signed by a trusted CA, and PKI is the framework that manages key generation, certificate issuance, and revocation to make this possible.
HTTPS is an application-layer protocol that uses PKI underneath but is not itself the trust model mechanism a security administrator implements.
TPM is a hardware chip for secure key storage and platform integrity, not a framework for establishing bidirectional trust between entities.
Concept tested: PKI supporting mutual two-way authentication
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/active-directory-certificate-services-overview
Topics
Community Discussion
No community discussion yet for this question.