nerdexam
CompTIA

SY0-301 · Question #622

In order to use a two-way trust model the security administrator MUST implement which of the following?

The correct answer is B. PKI. A two-way (mutual) trust model requires both parties to authenticate each other, which depends on a Public Key Infrastructure to issue and validate digital certificates.

Security architecture

Question

In order to use a two-way trust model the security administrator MUST implement which of the following?

Options

  • ADAC
  • BPKI
  • CHTTPS
  • DTPM

How the community answered

(44 responses)
  • A
    7% (3)
  • B
    86% (38)
  • C
    2% (1)
  • D
    5% (2)

Why each option

A two-way (mutual) trust model requires both parties to authenticate each other, which depends on a Public Key Infrastructure to issue and validate digital certificates.

ADAC

DAC (Discretionary Access Control) governs resource permissions based on owner-defined rules and is unrelated to establishing mutual trust between parties.

BPKICorrect

PKI provides the certificate authority hierarchy and digital certificates required for mutual authentication. In a two-way trust, each party presents a certificate signed by a trusted CA, and PKI is the framework that manages key generation, certificate issuance, and revocation to make this possible.

CHTTPS

HTTPS is an application-layer protocol that uses PKI underneath but is not itself the trust model mechanism a security administrator implements.

DTPM

TPM is a hardware chip for secure key storage and platform integrity, not a framework for establishing bidirectional trust between entities.

Concept tested: PKI supporting mutual two-way authentication

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/active-directory-certificate-services-overview

Topics

#PKI#trust models#certificate authority#mutual authentication

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice